1996-08-19 20:36:34 +00:00
|
|
|
/*
|
1998-09-15 19:28:10 +00:00
|
|
|
* Copyright (c) 1993, 1994, 1995, 1996, 1997, 1998
|
1996-08-19 20:36:34 +00:00
|
|
|
* The Regents of the University of California. All rights reserved.
|
|
|
|
*
|
|
|
|
* Redistribution and use in source and binary forms, with or without
|
|
|
|
* modification, are permitted provided that the following conditions
|
|
|
|
* are met:
|
|
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
|
|
* notice, this list of conditions and the following disclaimer.
|
|
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
|
|
* documentation and/or other materials provided with the distribution.
|
|
|
|
* 3. All advertising materials mentioning features or use of this software
|
|
|
|
* must display the following acknowledgement:
|
|
|
|
* This product includes software developed by the Computer Systems
|
|
|
|
* Engineering Group at Lawrence Berkeley Laboratory.
|
|
|
|
* 4. Neither the name of the University nor of the Laboratory may be used
|
|
|
|
* to endorse or promote products derived from this software without
|
|
|
|
* specific prior written permission.
|
|
|
|
*
|
|
|
|
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
|
|
* SUCH DAMAGE.
|
|
|
|
*/
|
|
|
|
|
2001-04-03 04:18:09 +00:00
|
|
|
#ifdef HAVE_CONFIG_H
|
|
|
|
#include "config.h"
|
1996-08-19 20:36:34 +00:00
|
|
|
#endif
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
#ifdef _WIN32
|
2004-03-31 09:07:39 +00:00
|
|
|
#include <pcap-stdinc.h>
|
2017-02-12 07:04:44 +00:00
|
|
|
#else /* _WIN32 */
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
#if HAVE_INTTYPES_H
|
|
|
|
#include <inttypes.h>
|
|
|
|
#elif HAVE_STDINT_H
|
|
|
|
#include <stdint.h>
|
|
|
|
#endif
|
|
|
|
#ifdef HAVE_SYS_BITYPES_H
|
|
|
|
#include <sys/bitypes.h>
|
|
|
|
#endif
|
1996-08-19 20:36:34 +00:00
|
|
|
#include <sys/types.h>
|
2008-09-16 20:32:29 +00:00
|
|
|
#include <sys/mman.h>
|
2017-02-12 07:04:44 +00:00
|
|
|
#endif /* _WIN32 */
|
1996-08-19 20:36:34 +00:00
|
|
|
|
|
|
|
#include <stdio.h>
|
|
|
|
#include <stdlib.h>
|
|
|
|
#include <string.h>
|
2012-01-31 17:22:07 +00:00
|
|
|
#if !defined(_MSC_VER) && !defined(__BORLANDC__) && !defined(__MINGW32__)
|
1996-08-19 20:36:34 +00:00
|
|
|
#include <unistd.h>
|
2004-03-31 09:07:39 +00:00
|
|
|
#endif
|
2002-06-21 01:36:27 +00:00
|
|
|
#include <fcntl.h>
|
|
|
|
#include <errno.h>
|
1996-08-19 20:36:34 +00:00
|
|
|
|
|
|
|
#ifdef HAVE_OS_PROTO_H
|
|
|
|
#include "os-proto.h"
|
|
|
|
#endif
|
|
|
|
|
2005-05-29 17:46:52 +00:00
|
|
|
#ifdef MSDOS
|
|
|
|
#include "pcap-dos.h"
|
|
|
|
#endif
|
|
|
|
|
1996-08-19 20:36:34 +00:00
|
|
|
#include "pcap-int.h"
|
|
|
|
|
2004-03-31 09:07:39 +00:00
|
|
|
#ifdef HAVE_DAG_API
|
2013-05-30 06:41:26 +00:00
|
|
|
#include "pcap-dag.h"
|
|
|
|
#endif /* HAVE_DAG_API */
|
|
|
|
|
|
|
|
#ifdef HAVE_SEPTEL_API
|
|
|
|
#include "pcap-septel.h"
|
|
|
|
#endif /* HAVE_SEPTEL_API */
|
|
|
|
|
|
|
|
#ifdef HAVE_SNF_API
|
|
|
|
#include "pcap-snf.h"
|
|
|
|
#endif /* HAVE_SNF_API */
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
#ifdef HAVE_TC_API
|
|
|
|
#include "pcap-tc.h"
|
|
|
|
#endif /* HAVE_TC_API */
|
|
|
|
|
2013-05-30 06:41:26 +00:00
|
|
|
#ifdef PCAP_SUPPORT_USB
|
|
|
|
#include "pcap-usb-linux.h"
|
|
|
|
#endif
|
|
|
|
|
|
|
|
#ifdef PCAP_SUPPORT_BT
|
|
|
|
#include "pcap-bt-linux.h"
|
|
|
|
#endif
|
|
|
|
|
2015-01-06 18:58:31 +00:00
|
|
|
#ifdef PCAP_SUPPORT_BT_MONITOR
|
|
|
|
#include "pcap-bt-monitor-linux.h"
|
|
|
|
#endif
|
|
|
|
|
2013-05-30 06:41:26 +00:00
|
|
|
#ifdef PCAP_SUPPORT_NETFILTER
|
|
|
|
#include "pcap-netfilter-linux.h"
|
2004-03-31 09:07:39 +00:00
|
|
|
#endif
|
|
|
|
|
2014-10-06 15:48:28 +00:00
|
|
|
#ifdef PCAP_SUPPORT_NETMAP
|
|
|
|
pcap_t* pcap_netmap_create(const char *device, char *ebuf, int *is_ours);
|
|
|
|
#endif
|
|
|
|
|
2015-01-06 18:58:31 +00:00
|
|
|
#ifdef PCAP_SUPPORT_DBUS
|
|
|
|
#include "pcap-dbus.h"
|
|
|
|
#endif
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
static int
|
|
|
|
pcap_not_initialized(pcap_t *pcap)
|
2009-03-21 20:43:56 +00:00
|
|
|
{
|
2017-02-12 07:04:44 +00:00
|
|
|
/* in case the caller doesn't check for PCAP_ERROR_NOT_ACTIVATED */
|
|
|
|
(void)pcap_snprintf(pcap->errbuf, sizeof(pcap->errbuf),
|
|
|
|
"This handle hasn't been activated yet");
|
2009-03-21 20:43:56 +00:00
|
|
|
/* this means 'not initialized' */
|
2012-01-31 17:22:07 +00:00
|
|
|
return (PCAP_ERROR_NOT_ACTIVATED);
|
2009-03-21 20:43:56 +00:00
|
|
|
}
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
#ifdef _WIN32
|
|
|
|
static void *
|
|
|
|
pcap_not_initialized_ptr(pcap_t *pcap)
|
|
|
|
{
|
|
|
|
(void)pcap_snprintf(pcap->errbuf, sizeof(pcap->errbuf),
|
|
|
|
"This handle hasn't been activated yet");
|
|
|
|
return (NULL);
|
|
|
|
}
|
|
|
|
|
|
|
|
static HANDLE
|
|
|
|
pcap_getevent_not_initialized(pcap_t *pcap)
|
|
|
|
{
|
|
|
|
(void)pcap_snprintf(pcap->errbuf, sizeof(pcap->errbuf),
|
|
|
|
"This handle hasn't been activated yet");
|
|
|
|
return (INVALID_HANDLE_VALUE);
|
|
|
|
}
|
|
|
|
|
|
|
|
static u_int
|
|
|
|
pcap_sendqueue_transmit_not_initialized(pcap_t *pcap, pcap_send_queue* queue, int sync)
|
|
|
|
{
|
|
|
|
(void)pcap_snprintf(pcap->errbuf, sizeof(pcap->errbuf),
|
|
|
|
"This handle hasn't been activated yet");
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
|
|
|
|
static PAirpcapHandle
|
|
|
|
pcap_get_airpcap_handle_not_initialized(pcap_t *pcap)
|
2015-01-06 18:58:31 +00:00
|
|
|
{
|
2017-02-12 07:04:44 +00:00
|
|
|
(void)pcap_snprintf(pcap->errbuf, sizeof(pcap->errbuf),
|
|
|
|
"This handle hasn't been activated yet");
|
2015-01-06 18:58:31 +00:00
|
|
|
return (NULL);
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
2009-03-21 20:43:56 +00:00
|
|
|
/*
|
|
|
|
* Returns 1 if rfmon mode can be set on the pcap_t, 0 if it can't,
|
|
|
|
* a PCAP_ERROR value on an error.
|
|
|
|
*/
|
1996-08-19 20:36:34 +00:00
|
|
|
int
|
2009-03-21 20:43:56 +00:00
|
|
|
pcap_can_set_rfmon(pcap_t *p)
|
|
|
|
{
|
|
|
|
return (p->can_set_rfmon_op(p));
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* For systems where rfmon mode is never supported.
|
|
|
|
*/
|
|
|
|
static int
|
|
|
|
pcap_cant_set_rfmon(pcap_t *p _U_)
|
|
|
|
{
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
|
2012-01-31 17:22:07 +00:00
|
|
|
/*
|
|
|
|
* Sets *tstamp_typesp to point to an array 1 or more supported time stamp
|
|
|
|
* types; the return value is the number of supported time stamp types.
|
|
|
|
* The list should be freed by a call to pcap_free_tstamp_types() when
|
|
|
|
* you're done with it.
|
|
|
|
*
|
|
|
|
* A return value of 0 means "you don't get a choice of time stamp type",
|
|
|
|
* in which case *tstamp_typesp is set to null.
|
|
|
|
*
|
|
|
|
* PCAP_ERROR is returned on error.
|
|
|
|
*/
|
|
|
|
int
|
|
|
|
pcap_list_tstamp_types(pcap_t *p, int **tstamp_typesp)
|
|
|
|
{
|
|
|
|
if (p->tstamp_type_count == 0) {
|
|
|
|
/*
|
|
|
|
* We don't support multiple time stamp types.
|
|
|
|
*/
|
|
|
|
*tstamp_typesp = NULL;
|
|
|
|
} else {
|
|
|
|
*tstamp_typesp = (int*)calloc(sizeof(**tstamp_typesp),
|
|
|
|
p->tstamp_type_count);
|
|
|
|
if (*tstamp_typesp == NULL) {
|
2017-02-12 07:04:44 +00:00
|
|
|
(void)pcap_snprintf(p->errbuf, sizeof(p->errbuf),
|
2012-01-31 17:22:07 +00:00
|
|
|
"malloc: %s", pcap_strerror(errno));
|
|
|
|
return (PCAP_ERROR);
|
|
|
|
}
|
|
|
|
(void)memcpy(*tstamp_typesp, p->tstamp_type_list,
|
|
|
|
sizeof(**tstamp_typesp) * p->tstamp_type_count);
|
|
|
|
}
|
|
|
|
return (p->tstamp_type_count);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* In Windows, you might have a library built with one version of the
|
|
|
|
* C runtime library and an application built with another version of
|
|
|
|
* the C runtime library, which means that the library might use one
|
|
|
|
* version of malloc() and free() and the application might use another
|
|
|
|
* version of malloc() and free(). If so, that means something
|
|
|
|
* allocated by the library cannot be freed by the application, so we
|
|
|
|
* need to have a pcap_free_tstamp_types() routine to free up the list
|
|
|
|
* allocated by pcap_list_tstamp_types(), even though it's just a wrapper
|
|
|
|
* around free().
|
|
|
|
*/
|
|
|
|
void
|
|
|
|
pcap_free_tstamp_types(int *tstamp_type_list)
|
|
|
|
{
|
|
|
|
free(tstamp_type_list);
|
|
|
|
}
|
|
|
|
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
/*
|
|
|
|
* Default one-shot callback; overridden for capture types where the
|
|
|
|
* packet data cannot be guaranteed to be available after the callback
|
|
|
|
* returns, so that a copy must be made.
|
|
|
|
*/
|
2015-01-06 18:58:31 +00:00
|
|
|
void
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
pcap_oneshot(u_char *user, const struct pcap_pkthdr *h, const u_char *pkt)
|
|
|
|
{
|
|
|
|
struct oneshot_userdata *sp = (struct oneshot_userdata *)user;
|
|
|
|
|
|
|
|
*sp->hdr = *h;
|
|
|
|
*sp->pkt = pkt;
|
|
|
|
}
|
|
|
|
|
|
|
|
const u_char *
|
|
|
|
pcap_next(pcap_t *p, struct pcap_pkthdr *h)
|
|
|
|
{
|
|
|
|
struct oneshot_userdata s;
|
|
|
|
const u_char *pkt;
|
|
|
|
|
|
|
|
s.hdr = h;
|
|
|
|
s.pkt = &pkt;
|
|
|
|
s.pd = p;
|
|
|
|
if (pcap_dispatch(p, 1, p->oneshot_callback, (u_char *)&s) <= 0)
|
|
|
|
return (0);
|
|
|
|
return (pkt);
|
|
|
|
}
|
|
|
|
|
2015-01-06 18:58:31 +00:00
|
|
|
int
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
pcap_next_ex(pcap_t *p, struct pcap_pkthdr **pkt_header,
|
|
|
|
const u_char **pkt_data)
|
|
|
|
{
|
|
|
|
struct oneshot_userdata s;
|
|
|
|
|
|
|
|
s.hdr = &p->pcap_header;
|
|
|
|
s.pkt = pkt_data;
|
|
|
|
s.pd = p;
|
|
|
|
|
|
|
|
/* Saves a pointer to the packet headers */
|
|
|
|
*pkt_header= &p->pcap_header;
|
|
|
|
|
2015-01-06 18:58:31 +00:00
|
|
|
if (p->rfile != NULL) {
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
int status;
|
|
|
|
|
|
|
|
/* We are on an offline capture */
|
2012-01-31 17:22:07 +00:00
|
|
|
status = pcap_offline_read(p, 1, p->oneshot_callback,
|
|
|
|
(u_char *)&s);
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Return codes for pcap_offline_read() are:
|
|
|
|
* - 0: EOF
|
|
|
|
* - -1: error
|
|
|
|
* - >1: OK
|
|
|
|
* The first one ('0') conflicts with the return code of
|
|
|
|
* 0 from pcap_read() meaning "no packets arrived before
|
|
|
|
* the timeout expired", so we map it to -2 so you can
|
|
|
|
* distinguish between an EOF from a savefile and a
|
|
|
|
* "no packets arrived before the timeout expired, try
|
|
|
|
* again" from a live capture.
|
|
|
|
*/
|
|
|
|
if (status == 0)
|
|
|
|
return (-2);
|
|
|
|
else
|
|
|
|
return (status);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Return codes for pcap_read() are:
|
|
|
|
* - 0: timeout
|
|
|
|
* - -1: error
|
|
|
|
* - -2: loop was broken out of with pcap_breakloop()
|
|
|
|
* - >1: OK
|
|
|
|
* The first one ('0') conflicts with the return code of 0 from
|
|
|
|
* pcap_offline_read() meaning "end of file".
|
|
|
|
*/
|
2012-01-31 17:22:07 +00:00
|
|
|
return (p->read_op(p, 1, p->oneshot_callback, (u_char *)&s));
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
}
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
static struct capture_source_type {
|
2013-05-30 06:41:26 +00:00
|
|
|
int (*findalldevs_op)(pcap_if_t **, char *);
|
|
|
|
pcap_t *(*create_op)(const char *, char *, int *);
|
|
|
|
} capture_source_types[] = {
|
2014-10-06 15:48:28 +00:00
|
|
|
#ifdef PCAP_SUPPORT_NETMAP
|
|
|
|
{ NULL, pcap_netmap_create },
|
|
|
|
#endif
|
2013-05-30 06:41:26 +00:00
|
|
|
#ifdef HAVE_DAG_API
|
|
|
|
{ dag_findalldevs, dag_create },
|
|
|
|
#endif
|
|
|
|
#ifdef HAVE_SEPTEL_API
|
|
|
|
{ septel_findalldevs, septel_create },
|
|
|
|
#endif
|
|
|
|
#ifdef HAVE_SNF_API
|
|
|
|
{ snf_findalldevs, snf_create },
|
|
|
|
#endif
|
2017-02-12 07:04:44 +00:00
|
|
|
#ifdef HAVE_TC_API
|
|
|
|
{ TcFindAllDevs, TcCreate },
|
|
|
|
#endif
|
2013-05-30 06:41:26 +00:00
|
|
|
#ifdef PCAP_SUPPORT_BT
|
|
|
|
{ bt_findalldevs, bt_create },
|
|
|
|
#endif
|
2015-01-06 18:58:31 +00:00
|
|
|
#ifdef PCAP_SUPPORT_BT_MONITOR
|
|
|
|
{ bt_monitor_findalldevs, bt_monitor_create },
|
|
|
|
#endif
|
2013-05-30 06:41:26 +00:00
|
|
|
#ifdef PCAP_SUPPORT_USB
|
|
|
|
{ usb_findalldevs, usb_create },
|
|
|
|
#endif
|
|
|
|
#ifdef PCAP_SUPPORT_NETFILTER
|
|
|
|
{ netfilter_findalldevs, netfilter_create },
|
2015-01-06 18:58:31 +00:00
|
|
|
#endif
|
|
|
|
#ifdef PCAP_SUPPORT_DBUS
|
|
|
|
{ dbus_findalldevs, dbus_create },
|
2013-05-30 06:41:26 +00:00
|
|
|
#endif
|
|
|
|
{ NULL, NULL }
|
|
|
|
};
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Get a list of all capture sources that are up and that we can open.
|
|
|
|
* Returns -1 on error, 0 otherwise.
|
|
|
|
* The list, as returned through "alldevsp", may be null if no interfaces
|
|
|
|
* were up and could be opened.
|
|
|
|
*/
|
|
|
|
int
|
|
|
|
pcap_findalldevs(pcap_if_t **alldevsp, char *errbuf)
|
|
|
|
{
|
|
|
|
size_t i;
|
|
|
|
|
|
|
|
/*
|
2017-02-12 07:04:44 +00:00
|
|
|
* Find all the local network interfaces on which we
|
|
|
|
* can capture.
|
2013-05-30 06:41:26 +00:00
|
|
|
*/
|
2017-02-12 07:04:44 +00:00
|
|
|
if (pcap_platform_finddevs(alldevsp, errbuf) == -1)
|
2013-05-30 06:41:26 +00:00
|
|
|
return (-1);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Ask each of the non-local-network-interface capture
|
|
|
|
* source types what interfaces they have.
|
|
|
|
*/
|
|
|
|
for (i = 0; capture_source_types[i].findalldevs_op != NULL; i++) {
|
|
|
|
if (capture_source_types[i].findalldevs_op(alldevsp, errbuf) == -1) {
|
|
|
|
/*
|
|
|
|
* We had an error; free the list we've been
|
|
|
|
* constructing.
|
|
|
|
*/
|
|
|
|
if (*alldevsp != NULL) {
|
|
|
|
pcap_freealldevs(*alldevsp);
|
|
|
|
*alldevsp = NULL;
|
|
|
|
}
|
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
}
|
2015-01-06 18:58:31 +00:00
|
|
|
|
2013-05-30 06:41:26 +00:00
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
|
|
|
|
pcap_t *
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_create(const char *device, char *errbuf)
|
2013-05-30 06:41:26 +00:00
|
|
|
{
|
|
|
|
size_t i;
|
|
|
|
int is_theirs;
|
|
|
|
pcap_t *p;
|
2017-02-12 07:04:44 +00:00
|
|
|
char *device_str;
|
2013-05-30 06:41:26 +00:00
|
|
|
|
|
|
|
/*
|
2017-02-12 07:04:44 +00:00
|
|
|
* A null device name is equivalent to the "any" device -
|
2013-05-30 06:41:26 +00:00
|
|
|
* which might not be supported on this platform, but
|
|
|
|
* this means that you'll get a "not supported" error
|
|
|
|
* rather than, say, a crash when we try to dereference
|
|
|
|
* the null pointer.
|
|
|
|
*/
|
2017-02-12 07:04:44 +00:00
|
|
|
if (device == NULL)
|
|
|
|
device_str = strdup("any");
|
|
|
|
else {
|
|
|
|
#ifdef _WIN32
|
|
|
|
/*
|
|
|
|
* If the string appears to be little-endian UCS-2/UTF-16,
|
|
|
|
* convert it to ASCII.
|
|
|
|
*
|
|
|
|
* XXX - to UTF-8 instead? Or report an error if any
|
|
|
|
* character isn't ASCII?
|
|
|
|
*/
|
|
|
|
if (device[0] != '\0' && device[1] == '\0') {
|
|
|
|
size_t length;
|
|
|
|
|
|
|
|
length = wcslen((wchar_t *)device);
|
|
|
|
device_str = (char *)malloc(length + 1);
|
|
|
|
if (device_str == NULL) {
|
|
|
|
pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE,
|
|
|
|
"malloc: %s", pcap_strerror(errno));
|
|
|
|
return (NULL);
|
|
|
|
}
|
|
|
|
|
|
|
|
pcap_snprintf(device_str, length + 1, "%ws",
|
|
|
|
(const wchar_t *)device);
|
|
|
|
} else
|
|
|
|
#endif
|
|
|
|
device_str = strdup(device);
|
|
|
|
}
|
|
|
|
if (device_str == NULL) {
|
|
|
|
pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE,
|
|
|
|
"malloc: %s", pcap_strerror(errno));
|
|
|
|
return (NULL);
|
|
|
|
}
|
2013-05-30 06:41:26 +00:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Try each of the non-local-network-interface capture
|
|
|
|
* source types until we find one that works for this
|
|
|
|
* device or run out of types.
|
|
|
|
*/
|
|
|
|
for (i = 0; capture_source_types[i].create_op != NULL; i++) {
|
|
|
|
is_theirs = 0;
|
2017-02-12 07:04:44 +00:00
|
|
|
p = capture_source_types[i].create_op(device_str, errbuf,
|
|
|
|
&is_theirs);
|
2013-05-30 06:41:26 +00:00
|
|
|
if (is_theirs) {
|
|
|
|
/*
|
|
|
|
* The device name refers to a device of the
|
|
|
|
* type in question; either it succeeded,
|
|
|
|
* in which case p refers to a pcap_t to
|
|
|
|
* later activate for the device, or it
|
|
|
|
* failed, in which case p is null and we
|
|
|
|
* should return that to report the failure
|
|
|
|
* to create.
|
|
|
|
*/
|
2017-02-12 07:04:44 +00:00
|
|
|
if (p == NULL) {
|
|
|
|
/*
|
|
|
|
* We assume the caller filled in errbuf.
|
|
|
|
*/
|
|
|
|
free(device_str);
|
|
|
|
return (NULL);
|
|
|
|
}
|
|
|
|
p->opt.device = device_str;
|
2013-05-30 06:41:26 +00:00
|
|
|
return (p);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* OK, try it as a regular network interface.
|
|
|
|
*/
|
2017-02-12 07:04:44 +00:00
|
|
|
p = pcap_create_interface(device_str, errbuf);
|
|
|
|
if (p == NULL) {
|
|
|
|
/*
|
|
|
|
* We assume the caller filled in errbuf.
|
|
|
|
*/
|
|
|
|
free(device_str);
|
|
|
|
return (NULL);
|
|
|
|
}
|
|
|
|
p->opt.device = device_str;
|
|
|
|
return (p);
|
2013-05-30 06:41:26 +00:00
|
|
|
}
|
|
|
|
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
static void
|
|
|
|
initialize_ops(pcap_t *p)
|
|
|
|
{
|
|
|
|
/*
|
|
|
|
* Set operation pointers for operations that only work on
|
|
|
|
* an activated pcap_t to point to a routine that returns
|
|
|
|
* a "this isn't activated" error.
|
|
|
|
*/
|
|
|
|
p->read_op = (read_op_t)pcap_not_initialized;
|
|
|
|
p->inject_op = (inject_op_t)pcap_not_initialized;
|
|
|
|
p->setfilter_op = (setfilter_op_t)pcap_not_initialized;
|
|
|
|
p->setdirection_op = (setdirection_op_t)pcap_not_initialized;
|
|
|
|
p->set_datalink_op = (set_datalink_op_t)pcap_not_initialized;
|
|
|
|
p->getnonblock_op = (getnonblock_op_t)pcap_not_initialized;
|
|
|
|
p->setnonblock_op = (setnonblock_op_t)pcap_not_initialized;
|
|
|
|
p->stats_op = (stats_op_t)pcap_not_initialized;
|
2017-02-12 07:04:44 +00:00
|
|
|
#ifdef _WIN32
|
|
|
|
p->stats_ex_op = (stats_ex_op_t)pcap_not_initialized_ptr;
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
p->setbuff_op = (setbuff_op_t)pcap_not_initialized;
|
|
|
|
p->setmode_op = (setmode_op_t)pcap_not_initialized;
|
|
|
|
p->setmintocopy_op = (setmintocopy_op_t)pcap_not_initialized;
|
2017-02-12 07:04:44 +00:00
|
|
|
p->getevent_op = pcap_getevent_not_initialized;
|
|
|
|
p->oid_get_request_op = (oid_get_request_op_t)pcap_not_initialized;
|
|
|
|
p->oid_set_request_op = (oid_set_request_op_t)pcap_not_initialized;
|
|
|
|
p->sendqueue_transmit_op = pcap_sendqueue_transmit_not_initialized;
|
|
|
|
p->setuserbuffer_op = (setuserbuffer_op_t)pcap_not_initialized;
|
|
|
|
p->live_dump_op = (live_dump_op_t)pcap_not_initialized;
|
|
|
|
p->live_dump_ended_op = (live_dump_ended_op_t)pcap_not_initialized;
|
|
|
|
p->get_airpcap_handle_op = pcap_get_airpcap_handle_not_initialized;
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
#endif
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Default cleanup operation - implementations can override
|
|
|
|
* this, but should call pcap_cleanup_live_common() after
|
|
|
|
* doing their own additional cleanup.
|
|
|
|
*/
|
|
|
|
p->cleanup_op = pcap_cleanup_live_common;
|
|
|
|
|
|
|
|
/*
|
2015-01-06 18:58:31 +00:00
|
|
|
* In most cases, the standard one-shot callback can
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
* be used for pcap_next()/pcap_next_ex().
|
|
|
|
*/
|
|
|
|
p->oneshot_callback = pcap_oneshot;
|
|
|
|
}
|
|
|
|
|
2015-01-06 18:58:31 +00:00
|
|
|
static pcap_t *
|
|
|
|
pcap_alloc_pcap_t(char *ebuf, size_t size)
|
2009-03-21 20:43:56 +00:00
|
|
|
{
|
2015-01-06 18:58:31 +00:00
|
|
|
char *chunk;
|
2009-03-21 20:43:56 +00:00
|
|
|
pcap_t *p;
|
|
|
|
|
2015-01-06 18:58:31 +00:00
|
|
|
/*
|
|
|
|
* Allocate a chunk of memory big enough for a pcap_t
|
|
|
|
* plus a structure following it of size "size". The
|
|
|
|
* structure following it is a private data structure
|
|
|
|
* for the routines that handle this pcap_t.
|
|
|
|
*/
|
|
|
|
chunk = malloc(sizeof (pcap_t) + size);
|
|
|
|
if (chunk == NULL) {
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(ebuf, PCAP_ERRBUF_SIZE, "malloc: %s",
|
2009-03-21 20:43:56 +00:00
|
|
|
pcap_strerror(errno));
|
|
|
|
return (NULL);
|
|
|
|
}
|
2015-01-06 18:58:31 +00:00
|
|
|
memset(chunk, 0, sizeof (pcap_t) + size);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Get a pointer to the pcap_t at the beginning.
|
|
|
|
*/
|
|
|
|
p = (pcap_t *)chunk;
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
#ifndef _WIN32
|
2009-03-21 20:43:56 +00:00
|
|
|
p->fd = -1; /* not opened yet */
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
p->selectable_fd = -1;
|
2015-01-06 18:58:31 +00:00
|
|
|
#endif
|
|
|
|
|
|
|
|
if (size == 0) {
|
|
|
|
/* No private data was requested. */
|
|
|
|
p->priv = NULL;
|
|
|
|
} else {
|
|
|
|
/*
|
|
|
|
* Set the pointer to the private data; that's the structure
|
|
|
|
* of size "size" following the pcap_t.
|
|
|
|
*/
|
|
|
|
p->priv = (void *)(chunk + sizeof (pcap_t));
|
|
|
|
}
|
|
|
|
|
|
|
|
return (p);
|
|
|
|
}
|
|
|
|
|
|
|
|
pcap_t *
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_create_common(char *ebuf, size_t size)
|
2015-01-06 18:58:31 +00:00
|
|
|
{
|
|
|
|
pcap_t *p;
|
|
|
|
|
|
|
|
p = pcap_alloc_pcap_t(ebuf, size);
|
|
|
|
if (p == NULL)
|
|
|
|
return (NULL);
|
2009-03-21 20:43:56 +00:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Default to "can't set rfmon mode"; if it's supported by
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
* a platform, the create routine that called us can set
|
|
|
|
* the op to its routine to check whether a particular
|
|
|
|
* device supports it.
|
2009-03-21 20:43:56 +00:00
|
|
|
*/
|
|
|
|
p->can_set_rfmon_op = pcap_cant_set_rfmon;
|
|
|
|
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
initialize_ops(p);
|
2009-03-21 20:43:56 +00:00
|
|
|
|
|
|
|
/* put in some defaults*/
|
2017-02-12 07:04:44 +00:00
|
|
|
p->snapshot = MAXIMUM_SNAPLEN; /* max packet size */
|
|
|
|
p->opt.timeout = 0; /* no timeout specified */
|
|
|
|
p->opt.buffer_size = 0; /* use the platform's default */
|
2009-03-21 20:43:56 +00:00
|
|
|
p->opt.promisc = 0;
|
2015-01-06 18:58:31 +00:00
|
|
|
p->opt.rfmon = 0;
|
|
|
|
p->opt.immediate = 0;
|
2012-01-31 17:22:07 +00:00
|
|
|
p->opt.tstamp_type = -1; /* default to not setting time stamp type */
|
2015-01-06 18:58:31 +00:00
|
|
|
p->opt.tstamp_precision = PCAP_TSTAMP_PRECISION_MICRO;
|
2017-02-12 07:04:44 +00:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Start out with no BPF code generation flags set.
|
|
|
|
*/
|
|
|
|
p->bpf_codegen_flags = 0;
|
|
|
|
|
2009-03-21 20:43:56 +00:00
|
|
|
return (p);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_check_activated(pcap_t *p)
|
|
|
|
{
|
|
|
|
if (p->activated) {
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE, "can't perform "
|
2009-03-21 20:43:56 +00:00
|
|
|
" operation on activated capture");
|
2012-01-31 17:22:07 +00:00
|
|
|
return (-1);
|
2009-03-21 20:43:56 +00:00
|
|
|
}
|
2012-01-31 17:22:07 +00:00
|
|
|
return (0);
|
2009-03-21 20:43:56 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_set_snaplen(pcap_t *p, int snaplen)
|
|
|
|
{
|
|
|
|
if (pcap_check_activated(p))
|
2012-01-31 17:22:07 +00:00
|
|
|
return (PCAP_ERROR_ACTIVATED);
|
2017-02-12 07:04:44 +00:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Turn invalid values, or excessively large values, into
|
|
|
|
* the maximum allowed value.
|
|
|
|
*
|
|
|
|
* If some application really *needs* a bigger snapshot
|
|
|
|
* length, we should just increase MAXIMUM_SNAPLEN.
|
|
|
|
*/
|
|
|
|
if (snaplen <= 0 || snaplen > MAXIMUM_SNAPLEN)
|
|
|
|
snaplen = MAXIMUM_SNAPLEN;
|
2009-03-21 20:43:56 +00:00
|
|
|
p->snapshot = snaplen;
|
2012-01-31 17:22:07 +00:00
|
|
|
return (0);
|
2009-03-21 20:43:56 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_set_promisc(pcap_t *p, int promisc)
|
|
|
|
{
|
|
|
|
if (pcap_check_activated(p))
|
2012-01-31 17:22:07 +00:00
|
|
|
return (PCAP_ERROR_ACTIVATED);
|
2009-03-21 20:43:56 +00:00
|
|
|
p->opt.promisc = promisc;
|
2012-01-31 17:22:07 +00:00
|
|
|
return (0);
|
2009-03-21 20:43:56 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_set_rfmon(pcap_t *p, int rfmon)
|
|
|
|
{
|
|
|
|
if (pcap_check_activated(p))
|
2012-01-31 17:22:07 +00:00
|
|
|
return (PCAP_ERROR_ACTIVATED);
|
2009-03-21 20:43:56 +00:00
|
|
|
p->opt.rfmon = rfmon;
|
2012-01-31 17:22:07 +00:00
|
|
|
return (0);
|
2009-03-21 20:43:56 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_set_timeout(pcap_t *p, int timeout_ms)
|
1996-08-19 20:36:34 +00:00
|
|
|
{
|
2009-03-21 20:43:56 +00:00
|
|
|
if (pcap_check_activated(p))
|
2012-01-31 17:22:07 +00:00
|
|
|
return (PCAP_ERROR_ACTIVATED);
|
2015-01-06 18:58:31 +00:00
|
|
|
p->opt.timeout = timeout_ms;
|
2012-01-31 17:22:07 +00:00
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_set_tstamp_type(pcap_t *p, int tstamp_type)
|
|
|
|
{
|
|
|
|
int i;
|
|
|
|
|
|
|
|
if (pcap_check_activated(p))
|
|
|
|
return (PCAP_ERROR_ACTIVATED);
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
/*
|
|
|
|
* The argument should have been u_int, but that's too late
|
|
|
|
* to change now - it's an API.
|
|
|
|
*/
|
|
|
|
if (tstamp_type < 0)
|
|
|
|
return (PCAP_WARNING_TSTAMP_TYPE_NOTSUP);
|
|
|
|
|
2012-01-31 17:22:07 +00:00
|
|
|
/*
|
2015-01-06 18:58:31 +00:00
|
|
|
* If p->tstamp_type_count is 0, we only support PCAP_TSTAMP_HOST;
|
|
|
|
* the default time stamp type is PCAP_TSTAMP_HOST.
|
2012-01-31 17:22:07 +00:00
|
|
|
*/
|
2015-01-06 18:58:31 +00:00
|
|
|
if (p->tstamp_type_count == 0) {
|
|
|
|
if (tstamp_type == PCAP_TSTAMP_HOST) {
|
2012-01-31 17:22:07 +00:00
|
|
|
p->opt.tstamp_type = tstamp_type;
|
|
|
|
return (0);
|
|
|
|
}
|
2015-01-06 18:58:31 +00:00
|
|
|
} else {
|
|
|
|
/*
|
|
|
|
* Check whether we claim to support this type of time stamp.
|
|
|
|
*/
|
|
|
|
for (i = 0; i < p->tstamp_type_count; i++) {
|
2017-02-12 07:04:44 +00:00
|
|
|
if (p->tstamp_type_list[i] == (u_int)tstamp_type) {
|
2015-01-06 18:58:31 +00:00
|
|
|
/*
|
|
|
|
* Yes.
|
|
|
|
*/
|
|
|
|
p->opt.tstamp_type = tstamp_type;
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
}
|
2012-01-31 17:22:07 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
2015-01-06 18:58:31 +00:00
|
|
|
* We don't support this type of time stamp.
|
2012-01-31 17:22:07 +00:00
|
|
|
*/
|
|
|
|
return (PCAP_WARNING_TSTAMP_TYPE_NOTSUP);
|
2009-03-21 20:43:56 +00:00
|
|
|
}
|
|
|
|
|
2015-01-06 18:58:31 +00:00
|
|
|
int
|
|
|
|
pcap_set_immediate_mode(pcap_t *p, int immediate)
|
|
|
|
{
|
|
|
|
if (pcap_check_activated(p))
|
|
|
|
return (PCAP_ERROR_ACTIVATED);
|
|
|
|
p->opt.immediate = immediate;
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
|
2009-03-21 20:43:56 +00:00
|
|
|
int
|
|
|
|
pcap_set_buffer_size(pcap_t *p, int buffer_size)
|
|
|
|
{
|
|
|
|
if (pcap_check_activated(p))
|
2012-01-31 17:22:07 +00:00
|
|
|
return (PCAP_ERROR_ACTIVATED);
|
2017-02-12 07:04:44 +00:00
|
|
|
if (buffer_size <= 0) {
|
|
|
|
/*
|
|
|
|
* Silently ignore invalid values.
|
|
|
|
*/
|
|
|
|
return (0);
|
|
|
|
}
|
2009-03-21 20:43:56 +00:00
|
|
|
p->opt.buffer_size = buffer_size;
|
2012-01-31 17:22:07 +00:00
|
|
|
return (0);
|
2009-03-21 20:43:56 +00:00
|
|
|
}
|
|
|
|
|
2015-01-06 18:58:31 +00:00
|
|
|
int
|
|
|
|
pcap_set_tstamp_precision(pcap_t *p, int tstamp_precision)
|
|
|
|
{
|
|
|
|
int i;
|
|
|
|
|
|
|
|
if (pcap_check_activated(p))
|
|
|
|
return (PCAP_ERROR_ACTIVATED);
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
/*
|
|
|
|
* The argument should have been u_int, but that's too late
|
|
|
|
* to change now - it's an API.
|
|
|
|
*/
|
|
|
|
if (tstamp_precision < 0)
|
|
|
|
return (PCAP_ERROR_TSTAMP_PRECISION_NOTSUP);
|
|
|
|
|
2015-01-06 18:58:31 +00:00
|
|
|
/*
|
|
|
|
* If p->tstamp_precision_count is 0, we only support setting
|
|
|
|
* the time stamp precision to microsecond precision; every
|
|
|
|
* pcap module *MUST* support microsecond precision, even if
|
|
|
|
* it does so by converting the native precision to
|
|
|
|
* microseconds.
|
|
|
|
*/
|
|
|
|
if (p->tstamp_precision_count == 0) {
|
|
|
|
if (tstamp_precision == PCAP_TSTAMP_PRECISION_MICRO) {
|
|
|
|
p->opt.tstamp_precision = tstamp_precision;
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
/*
|
|
|
|
* Check whether we claim to support this precision of
|
|
|
|
* time stamp.
|
|
|
|
*/
|
|
|
|
for (i = 0; i < p->tstamp_precision_count; i++) {
|
2017-02-12 07:04:44 +00:00
|
|
|
if (p->tstamp_precision_list[i] == (u_int)tstamp_precision) {
|
2015-01-06 18:58:31 +00:00
|
|
|
/*
|
|
|
|
* Yes.
|
|
|
|
*/
|
|
|
|
p->opt.tstamp_precision = tstamp_precision;
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* We don't support this time stamp precision.
|
|
|
|
*/
|
|
|
|
return (PCAP_ERROR_TSTAMP_PRECISION_NOTSUP);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_get_tstamp_precision(pcap_t *p)
|
|
|
|
{
|
|
|
|
return (p->opt.tstamp_precision);
|
|
|
|
}
|
|
|
|
|
2009-03-21 20:43:56 +00:00
|
|
|
int
|
|
|
|
pcap_activate(pcap_t *p)
|
1996-08-19 20:36:34 +00:00
|
|
|
{
|
2009-03-21 20:43:56 +00:00
|
|
|
int status;
|
1996-08-19 20:36:34 +00:00
|
|
|
|
2012-01-31 17:22:07 +00:00
|
|
|
/*
|
|
|
|
* Catch attempts to re-activate an already-activated
|
|
|
|
* pcap_t; this should, for example, catch code that
|
|
|
|
* calls pcap_open_live() followed by pcap_activate(),
|
|
|
|
* as some code that showed up in a Stack Exchange
|
|
|
|
* question did.
|
|
|
|
*/
|
|
|
|
if (pcap_check_activated(p))
|
|
|
|
return (PCAP_ERROR_ACTIVATED);
|
2009-03-21 20:43:56 +00:00
|
|
|
status = p->activate_op(p);
|
|
|
|
if (status >= 0)
|
|
|
|
p->activated = 1;
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
else {
|
|
|
|
if (p->errbuf[0] == '\0') {
|
|
|
|
/*
|
|
|
|
* No error message supplied by the activate routine;
|
|
|
|
* for the benefit of programs that don't specially
|
|
|
|
* handle errors other than PCAP_ERROR, return the
|
|
|
|
* error message corresponding to the status.
|
|
|
|
*/
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE, "%s",
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
pcap_statustostr(status));
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Undo any operation pointer setting, etc. done by
|
|
|
|
* the activate operation.
|
|
|
|
*/
|
|
|
|
initialize_ops(p);
|
|
|
|
}
|
2009-03-21 20:43:56 +00:00
|
|
|
return (status);
|
|
|
|
}
|
|
|
|
|
|
|
|
pcap_t *
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_open_live(const char *device, int snaplen, int promisc, int to_ms, char *errbuf)
|
2009-03-21 20:43:56 +00:00
|
|
|
{
|
|
|
|
pcap_t *p;
|
|
|
|
int status;
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
p = pcap_create(device, errbuf);
|
2009-03-21 20:43:56 +00:00
|
|
|
if (p == NULL)
|
|
|
|
return (NULL);
|
|
|
|
status = pcap_set_snaplen(p, snaplen);
|
|
|
|
if (status < 0)
|
|
|
|
goto fail;
|
|
|
|
status = pcap_set_promisc(p, promisc);
|
|
|
|
if (status < 0)
|
|
|
|
goto fail;
|
|
|
|
status = pcap_set_timeout(p, to_ms);
|
|
|
|
if (status < 0)
|
|
|
|
goto fail;
|
|
|
|
/*
|
|
|
|
* Mark this as opened with pcap_open_live(), so that, for
|
|
|
|
* example, we show the full list of DLT_ values, rather
|
|
|
|
* than just the ones that are compatible with capturing
|
|
|
|
* when not in monitor mode. That allows existing applications
|
|
|
|
* to work the way they used to work, but allows new applications
|
|
|
|
* that know about the new open API to, for example, find out the
|
|
|
|
* DLT_ values that they can select without changing whether
|
|
|
|
* the adapter is in monitor mode or not.
|
|
|
|
*/
|
|
|
|
p->oldstyle = 1;
|
|
|
|
status = pcap_activate(p);
|
|
|
|
if (status < 0)
|
|
|
|
goto fail;
|
|
|
|
return (p);
|
|
|
|
fail:
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
if (status == PCAP_ERROR)
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE, "%s: %s", device,
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
p->errbuf);
|
|
|
|
else if (status == PCAP_ERROR_NO_SUCH_DEVICE ||
|
2012-01-31 17:22:07 +00:00
|
|
|
status == PCAP_ERROR_PERM_DENIED ||
|
|
|
|
status == PCAP_ERROR_PROMISC_PERM_DENIED)
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE, "%s: %s (%s)", device,
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
pcap_statustostr(status), p->errbuf);
|
2009-03-21 20:43:56 +00:00
|
|
|
else
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE, "%s: %s", device,
|
2009-03-21 20:43:56 +00:00
|
|
|
pcap_statustostr(status));
|
|
|
|
pcap_close(p);
|
|
|
|
return (NULL);
|
|
|
|
}
|
1996-08-19 20:36:34 +00:00
|
|
|
|
2015-01-06 18:58:31 +00:00
|
|
|
pcap_t *
|
|
|
|
pcap_open_offline_common(char *ebuf, size_t size)
|
|
|
|
{
|
|
|
|
pcap_t *p;
|
|
|
|
|
|
|
|
p = pcap_alloc_pcap_t(ebuf, size);
|
|
|
|
if (p == NULL)
|
|
|
|
return (NULL);
|
|
|
|
|
|
|
|
p->opt.tstamp_precision = PCAP_TSTAMP_PRECISION_MICRO;
|
|
|
|
|
|
|
|
return (p);
|
|
|
|
}
|
|
|
|
|
2009-03-21 20:43:56 +00:00
|
|
|
int
|
|
|
|
pcap_dispatch(pcap_t *p, int cnt, pcap_handler callback, u_char *user)
|
|
|
|
{
|
2012-01-31 17:22:07 +00:00
|
|
|
return (p->read_op(p, cnt, callback, user));
|
2004-03-31 09:07:39 +00:00
|
|
|
}
|
|
|
|
|
1996-08-19 20:36:34 +00:00
|
|
|
int
|
|
|
|
pcap_loop(pcap_t *p, int cnt, pcap_handler callback, u_char *user)
|
|
|
|
{
|
1998-09-15 19:28:10 +00:00
|
|
|
register int n;
|
|
|
|
|
1996-08-19 20:36:34 +00:00
|
|
|
for (;;) {
|
2015-01-06 18:58:31 +00:00
|
|
|
if (p->rfile != NULL) {
|
2004-03-31 09:07:39 +00:00
|
|
|
/*
|
|
|
|
* 0 means EOF, so don't loop if we get 0.
|
|
|
|
*/
|
1998-09-15 19:28:10 +00:00
|
|
|
n = pcap_offline_read(p, cnt, callback, user);
|
2004-03-31 09:07:39 +00:00
|
|
|
} else {
|
1998-09-15 19:28:10 +00:00
|
|
|
/*
|
|
|
|
* XXX keep reading until we get something
|
|
|
|
* (or an error occurs)
|
|
|
|
*/
|
|
|
|
do {
|
2004-03-31 09:07:39 +00:00
|
|
|
n = p->read_op(p, cnt, callback, user);
|
1998-09-15 19:28:10 +00:00
|
|
|
} while (n == 0);
|
|
|
|
}
|
1996-08-19 20:36:34 +00:00
|
|
|
if (n <= 0)
|
|
|
|
return (n);
|
2015-01-06 18:58:31 +00:00
|
|
|
if (!PACKET_COUNT_IS_UNLIMITED(cnt)) {
|
1996-08-19 20:36:34 +00:00
|
|
|
cnt -= n;
|
|
|
|
if (cnt <= 0)
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2004-03-31 09:07:39 +00:00
|
|
|
/*
|
|
|
|
* Force the loop in "pcap_read()" or "pcap_read_offline()" to terminate.
|
|
|
|
*/
|
|
|
|
void
|
|
|
|
pcap_breakloop(pcap_t *p)
|
|
|
|
{
|
|
|
|
p->break_loop = 1;
|
|
|
|
}
|
|
|
|
|
1996-08-19 20:36:34 +00:00
|
|
|
int
|
|
|
|
pcap_datalink(pcap_t *p)
|
|
|
|
{
|
2015-01-06 18:58:31 +00:00
|
|
|
if (!p->activated)
|
|
|
|
return (PCAP_ERROR_NOT_ACTIVATED);
|
1996-08-19 20:36:34 +00:00
|
|
|
return (p->linktype);
|
|
|
|
}
|
|
|
|
|
2009-03-21 20:43:56 +00:00
|
|
|
int
|
|
|
|
pcap_datalink_ext(pcap_t *p)
|
|
|
|
{
|
2015-01-06 18:58:31 +00:00
|
|
|
if (!p->activated)
|
|
|
|
return (PCAP_ERROR_NOT_ACTIVATED);
|
2009-03-21 20:43:56 +00:00
|
|
|
return (p->linktype_ext);
|
|
|
|
}
|
|
|
|
|
2003-01-26 01:16:33 +00:00
|
|
|
int
|
|
|
|
pcap_list_datalinks(pcap_t *p, int **dlt_buffer)
|
|
|
|
{
|
2015-01-06 18:58:31 +00:00
|
|
|
if (!p->activated)
|
|
|
|
return (PCAP_ERROR_NOT_ACTIVATED);
|
2004-03-31 09:07:39 +00:00
|
|
|
if (p->dlt_count == 0) {
|
|
|
|
/*
|
|
|
|
* We couldn't fetch the list of DLTs, which means
|
|
|
|
* this platform doesn't support changing the
|
|
|
|
* DLT for an interface. Return a list of DLTs
|
|
|
|
* containing only the DLT this device supports.
|
|
|
|
*/
|
|
|
|
*dlt_buffer = (int*)malloc(sizeof(**dlt_buffer));
|
|
|
|
if (*dlt_buffer == NULL) {
|
2017-02-12 07:04:44 +00:00
|
|
|
(void)pcap_snprintf(p->errbuf, sizeof(p->errbuf),
|
2004-03-31 09:07:39 +00:00
|
|
|
"malloc: %s", pcap_strerror(errno));
|
2015-01-06 18:58:31 +00:00
|
|
|
return (PCAP_ERROR);
|
2004-03-31 09:07:39 +00:00
|
|
|
}
|
|
|
|
**dlt_buffer = p->linktype;
|
|
|
|
return (1);
|
|
|
|
} else {
|
2007-10-16 02:02:02 +00:00
|
|
|
*dlt_buffer = (int*)calloc(sizeof(**dlt_buffer), p->dlt_count);
|
2004-03-31 09:07:39 +00:00
|
|
|
if (*dlt_buffer == NULL) {
|
2017-02-12 07:04:44 +00:00
|
|
|
(void)pcap_snprintf(p->errbuf, sizeof(p->errbuf),
|
2004-03-31 09:07:39 +00:00
|
|
|
"malloc: %s", pcap_strerror(errno));
|
2015-01-06 18:58:31 +00:00
|
|
|
return (PCAP_ERROR);
|
2004-03-31 09:07:39 +00:00
|
|
|
}
|
|
|
|
(void)memcpy(*dlt_buffer, p->dlt_list,
|
|
|
|
sizeof(**dlt_buffer) * p->dlt_count);
|
|
|
|
return (p->dlt_count);
|
2003-01-26 01:16:33 +00:00
|
|
|
}
|
2004-03-31 09:07:39 +00:00
|
|
|
}
|
|
|
|
|
2009-03-21 20:43:56 +00:00
|
|
|
/*
|
|
|
|
* In Windows, you might have a library built with one version of the
|
|
|
|
* C runtime library and an application built with another version of
|
|
|
|
* the C runtime library, which means that the library might use one
|
|
|
|
* version of malloc() and free() and the application might use another
|
|
|
|
* version of malloc() and free(). If so, that means something
|
|
|
|
* allocated by the library cannot be freed by the application, so we
|
|
|
|
* need to have a pcap_free_datalinks() routine to free up the list
|
|
|
|
* allocated by pcap_list_datalinks(), even though it's just a wrapper
|
|
|
|
* around free().
|
|
|
|
*/
|
|
|
|
void
|
|
|
|
pcap_free_datalinks(int *dlt_list)
|
|
|
|
{
|
|
|
|
free(dlt_list);
|
|
|
|
}
|
|
|
|
|
2004-03-31 09:07:39 +00:00
|
|
|
int
|
|
|
|
pcap_set_datalink(pcap_t *p, int dlt)
|
|
|
|
{
|
|
|
|
int i;
|
|
|
|
const char *dlt_name;
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
if (dlt < 0)
|
|
|
|
goto unsupported;
|
|
|
|
|
2004-03-31 09:07:39 +00:00
|
|
|
if (p->dlt_count == 0 || p->set_datalink_op == NULL) {
|
|
|
|
/*
|
|
|
|
* We couldn't fetch the list of DLTs, or we don't
|
|
|
|
* have a "set datalink" operation, which means
|
|
|
|
* this platform doesn't support changing the
|
|
|
|
* DLT for an interface. Check whether the new
|
|
|
|
* DLT is the one this interface supports.
|
|
|
|
*/
|
|
|
|
if (p->linktype != dlt)
|
|
|
|
goto unsupported;
|
|
|
|
|
|
|
|
/*
|
|
|
|
* It is, so there's nothing we need to do here.
|
|
|
|
*/
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
for (i = 0; i < p->dlt_count; i++)
|
2017-02-12 07:04:44 +00:00
|
|
|
if (p->dlt_list[i] == (u_int)dlt)
|
2004-03-31 09:07:39 +00:00
|
|
|
break;
|
|
|
|
if (i >= p->dlt_count)
|
|
|
|
goto unsupported;
|
2005-05-29 17:46:52 +00:00
|
|
|
if (p->dlt_count == 2 && p->dlt_list[0] == DLT_EN10MB &&
|
|
|
|
dlt == DLT_DOCSIS) {
|
|
|
|
/*
|
|
|
|
* This is presumably an Ethernet device, as the first
|
|
|
|
* link-layer type it offers is DLT_EN10MB, and the only
|
|
|
|
* other type it offers is DLT_DOCSIS. That means that
|
|
|
|
* we can't tell the driver to supply DOCSIS link-layer
|
|
|
|
* headers - we're just pretending that's what we're
|
|
|
|
* getting, as, presumably, we're capturing on a dedicated
|
|
|
|
* link to a Cisco Cable Modem Termination System, and
|
|
|
|
* it's putting raw DOCSIS frames on the wire inside low-level
|
|
|
|
* Ethernet framing.
|
|
|
|
*/
|
|
|
|
p->linktype = dlt;
|
|
|
|
return (0);
|
|
|
|
}
|
2004-03-31 09:07:39 +00:00
|
|
|
if (p->set_datalink_op(p, dlt) == -1)
|
|
|
|
return (-1);
|
|
|
|
p->linktype = dlt;
|
|
|
|
return (0);
|
|
|
|
|
|
|
|
unsupported:
|
|
|
|
dlt_name = pcap_datalink_val_to_name(dlt);
|
|
|
|
if (dlt_name != NULL) {
|
2017-02-12 07:04:44 +00:00
|
|
|
(void) pcap_snprintf(p->errbuf, sizeof(p->errbuf),
|
2004-03-31 09:07:39 +00:00
|
|
|
"%s is not one of the DLTs supported by this device",
|
|
|
|
dlt_name);
|
|
|
|
} else {
|
2017-02-12 07:04:44 +00:00
|
|
|
(void) pcap_snprintf(p->errbuf, sizeof(p->errbuf),
|
2004-03-31 09:07:39 +00:00
|
|
|
"DLT %d is not one of the DLTs supported by this device",
|
|
|
|
dlt);
|
|
|
|
}
|
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
|
2012-01-31 17:22:07 +00:00
|
|
|
/*
|
|
|
|
* This array is designed for mapping upper and lower case letter
|
|
|
|
* together for a case independent comparison. The mappings are
|
|
|
|
* based upon ascii character sequences.
|
|
|
|
*/
|
|
|
|
static const u_char charmap[] = {
|
|
|
|
(u_char)'\000', (u_char)'\001', (u_char)'\002', (u_char)'\003',
|
|
|
|
(u_char)'\004', (u_char)'\005', (u_char)'\006', (u_char)'\007',
|
|
|
|
(u_char)'\010', (u_char)'\011', (u_char)'\012', (u_char)'\013',
|
|
|
|
(u_char)'\014', (u_char)'\015', (u_char)'\016', (u_char)'\017',
|
|
|
|
(u_char)'\020', (u_char)'\021', (u_char)'\022', (u_char)'\023',
|
|
|
|
(u_char)'\024', (u_char)'\025', (u_char)'\026', (u_char)'\027',
|
|
|
|
(u_char)'\030', (u_char)'\031', (u_char)'\032', (u_char)'\033',
|
|
|
|
(u_char)'\034', (u_char)'\035', (u_char)'\036', (u_char)'\037',
|
|
|
|
(u_char)'\040', (u_char)'\041', (u_char)'\042', (u_char)'\043',
|
|
|
|
(u_char)'\044', (u_char)'\045', (u_char)'\046', (u_char)'\047',
|
|
|
|
(u_char)'\050', (u_char)'\051', (u_char)'\052', (u_char)'\053',
|
|
|
|
(u_char)'\054', (u_char)'\055', (u_char)'\056', (u_char)'\057',
|
|
|
|
(u_char)'\060', (u_char)'\061', (u_char)'\062', (u_char)'\063',
|
|
|
|
(u_char)'\064', (u_char)'\065', (u_char)'\066', (u_char)'\067',
|
|
|
|
(u_char)'\070', (u_char)'\071', (u_char)'\072', (u_char)'\073',
|
|
|
|
(u_char)'\074', (u_char)'\075', (u_char)'\076', (u_char)'\077',
|
|
|
|
(u_char)'\100', (u_char)'\141', (u_char)'\142', (u_char)'\143',
|
|
|
|
(u_char)'\144', (u_char)'\145', (u_char)'\146', (u_char)'\147',
|
|
|
|
(u_char)'\150', (u_char)'\151', (u_char)'\152', (u_char)'\153',
|
|
|
|
(u_char)'\154', (u_char)'\155', (u_char)'\156', (u_char)'\157',
|
|
|
|
(u_char)'\160', (u_char)'\161', (u_char)'\162', (u_char)'\163',
|
|
|
|
(u_char)'\164', (u_char)'\165', (u_char)'\166', (u_char)'\167',
|
|
|
|
(u_char)'\170', (u_char)'\171', (u_char)'\172', (u_char)'\133',
|
|
|
|
(u_char)'\134', (u_char)'\135', (u_char)'\136', (u_char)'\137',
|
|
|
|
(u_char)'\140', (u_char)'\141', (u_char)'\142', (u_char)'\143',
|
|
|
|
(u_char)'\144', (u_char)'\145', (u_char)'\146', (u_char)'\147',
|
|
|
|
(u_char)'\150', (u_char)'\151', (u_char)'\152', (u_char)'\153',
|
|
|
|
(u_char)'\154', (u_char)'\155', (u_char)'\156', (u_char)'\157',
|
|
|
|
(u_char)'\160', (u_char)'\161', (u_char)'\162', (u_char)'\163',
|
|
|
|
(u_char)'\164', (u_char)'\165', (u_char)'\166', (u_char)'\167',
|
|
|
|
(u_char)'\170', (u_char)'\171', (u_char)'\172', (u_char)'\173',
|
|
|
|
(u_char)'\174', (u_char)'\175', (u_char)'\176', (u_char)'\177',
|
|
|
|
(u_char)'\200', (u_char)'\201', (u_char)'\202', (u_char)'\203',
|
|
|
|
(u_char)'\204', (u_char)'\205', (u_char)'\206', (u_char)'\207',
|
|
|
|
(u_char)'\210', (u_char)'\211', (u_char)'\212', (u_char)'\213',
|
|
|
|
(u_char)'\214', (u_char)'\215', (u_char)'\216', (u_char)'\217',
|
|
|
|
(u_char)'\220', (u_char)'\221', (u_char)'\222', (u_char)'\223',
|
|
|
|
(u_char)'\224', (u_char)'\225', (u_char)'\226', (u_char)'\227',
|
|
|
|
(u_char)'\230', (u_char)'\231', (u_char)'\232', (u_char)'\233',
|
|
|
|
(u_char)'\234', (u_char)'\235', (u_char)'\236', (u_char)'\237',
|
|
|
|
(u_char)'\240', (u_char)'\241', (u_char)'\242', (u_char)'\243',
|
|
|
|
(u_char)'\244', (u_char)'\245', (u_char)'\246', (u_char)'\247',
|
|
|
|
(u_char)'\250', (u_char)'\251', (u_char)'\252', (u_char)'\253',
|
|
|
|
(u_char)'\254', (u_char)'\255', (u_char)'\256', (u_char)'\257',
|
|
|
|
(u_char)'\260', (u_char)'\261', (u_char)'\262', (u_char)'\263',
|
|
|
|
(u_char)'\264', (u_char)'\265', (u_char)'\266', (u_char)'\267',
|
|
|
|
(u_char)'\270', (u_char)'\271', (u_char)'\272', (u_char)'\273',
|
|
|
|
(u_char)'\274', (u_char)'\275', (u_char)'\276', (u_char)'\277',
|
|
|
|
(u_char)'\300', (u_char)'\341', (u_char)'\342', (u_char)'\343',
|
|
|
|
(u_char)'\344', (u_char)'\345', (u_char)'\346', (u_char)'\347',
|
|
|
|
(u_char)'\350', (u_char)'\351', (u_char)'\352', (u_char)'\353',
|
|
|
|
(u_char)'\354', (u_char)'\355', (u_char)'\356', (u_char)'\357',
|
|
|
|
(u_char)'\360', (u_char)'\361', (u_char)'\362', (u_char)'\363',
|
|
|
|
(u_char)'\364', (u_char)'\365', (u_char)'\366', (u_char)'\367',
|
|
|
|
(u_char)'\370', (u_char)'\371', (u_char)'\372', (u_char)'\333',
|
|
|
|
(u_char)'\334', (u_char)'\335', (u_char)'\336', (u_char)'\337',
|
|
|
|
(u_char)'\340', (u_char)'\341', (u_char)'\342', (u_char)'\343',
|
|
|
|
(u_char)'\344', (u_char)'\345', (u_char)'\346', (u_char)'\347',
|
|
|
|
(u_char)'\350', (u_char)'\351', (u_char)'\352', (u_char)'\353',
|
|
|
|
(u_char)'\354', (u_char)'\355', (u_char)'\356', (u_char)'\357',
|
|
|
|
(u_char)'\360', (u_char)'\361', (u_char)'\362', (u_char)'\363',
|
|
|
|
(u_char)'\364', (u_char)'\365', (u_char)'\366', (u_char)'\367',
|
|
|
|
(u_char)'\370', (u_char)'\371', (u_char)'\372', (u_char)'\373',
|
|
|
|
(u_char)'\374', (u_char)'\375', (u_char)'\376', (u_char)'\377',
|
|
|
|
};
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_strcasecmp(const char *s1, const char *s2)
|
|
|
|
{
|
|
|
|
register const u_char *cm = charmap,
|
|
|
|
*us1 = (const u_char *)s1,
|
|
|
|
*us2 = (const u_char *)s2;
|
|
|
|
|
|
|
|
while (cm[*us1] == cm[*us2++])
|
|
|
|
if (*us1++ == '\0')
|
|
|
|
return(0);
|
|
|
|
return (cm[*us1] - cm[*--us2]);
|
|
|
|
}
|
|
|
|
|
2004-03-31 09:07:39 +00:00
|
|
|
struct dlt_choice {
|
|
|
|
const char *name;
|
|
|
|
const char *description;
|
|
|
|
int dlt;
|
|
|
|
};
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
#define DLT_CHOICE(code, description) { #code, description, DLT_ ## code }
|
2004-03-31 09:07:39 +00:00
|
|
|
#define DLT_CHOICE_SENTINEL { NULL, NULL, 0 }
|
|
|
|
|
|
|
|
static struct dlt_choice dlt_choices[] = {
|
2017-02-12 07:04:44 +00:00
|
|
|
DLT_CHOICE(NULL, "BSD loopback"),
|
|
|
|
DLT_CHOICE(EN10MB, "Ethernet"),
|
|
|
|
DLT_CHOICE(IEEE802, "Token ring"),
|
|
|
|
DLT_CHOICE(ARCNET, "BSD ARCNET"),
|
|
|
|
DLT_CHOICE(SLIP, "SLIP"),
|
|
|
|
DLT_CHOICE(PPP, "PPP"),
|
|
|
|
DLT_CHOICE(FDDI, "FDDI"),
|
|
|
|
DLT_CHOICE(ATM_RFC1483, "RFC 1483 LLC-encapsulated ATM"),
|
|
|
|
DLT_CHOICE(RAW, "Raw IP"),
|
|
|
|
DLT_CHOICE(SLIP_BSDOS, "BSD/OS SLIP"),
|
|
|
|
DLT_CHOICE(PPP_BSDOS, "BSD/OS PPP"),
|
|
|
|
DLT_CHOICE(ATM_CLIP, "Linux Classical IP-over-ATM"),
|
|
|
|
DLT_CHOICE(PPP_SERIAL, "PPP over serial"),
|
|
|
|
DLT_CHOICE(PPP_ETHER, "PPPoE"),
|
|
|
|
DLT_CHOICE(SYMANTEC_FIREWALL, "Symantec Firewall"),
|
|
|
|
DLT_CHOICE(C_HDLC, "Cisco HDLC"),
|
|
|
|
DLT_CHOICE(IEEE802_11, "802.11"),
|
|
|
|
DLT_CHOICE(FRELAY, "Frame Relay"),
|
|
|
|
DLT_CHOICE(LOOP, "OpenBSD loopback"),
|
|
|
|
DLT_CHOICE(ENC, "OpenBSD encapsulated IP"),
|
|
|
|
DLT_CHOICE(LINUX_SLL, "Linux cooked"),
|
|
|
|
DLT_CHOICE(LTALK, "Localtalk"),
|
|
|
|
DLT_CHOICE(PFLOG, "OpenBSD pflog file"),
|
|
|
|
DLT_CHOICE(PFSYNC, "Packet filter state syncing"),
|
|
|
|
DLT_CHOICE(PRISM_HEADER, "802.11 plus Prism header"),
|
|
|
|
DLT_CHOICE(IP_OVER_FC, "RFC 2625 IP-over-Fibre Channel"),
|
|
|
|
DLT_CHOICE(SUNATM, "Sun raw ATM"),
|
|
|
|
DLT_CHOICE(IEEE802_11_RADIO, "802.11 plus radiotap header"),
|
|
|
|
DLT_CHOICE(ARCNET_LINUX, "Linux ARCNET"),
|
|
|
|
DLT_CHOICE(JUNIPER_MLPPP, "Juniper Multi-Link PPP"),
|
|
|
|
DLT_CHOICE(JUNIPER_MLFR, "Juniper Multi-Link Frame Relay"),
|
|
|
|
DLT_CHOICE(JUNIPER_ES, "Juniper Encryption Services PIC"),
|
|
|
|
DLT_CHOICE(JUNIPER_GGSN, "Juniper GGSN PIC"),
|
|
|
|
DLT_CHOICE(JUNIPER_MFR, "Juniper FRF.16 Frame Relay"),
|
|
|
|
DLT_CHOICE(JUNIPER_ATM2, "Juniper ATM2 PIC"),
|
|
|
|
DLT_CHOICE(JUNIPER_SERVICES, "Juniper Advanced Services PIC"),
|
|
|
|
DLT_CHOICE(JUNIPER_ATM1, "Juniper ATM1 PIC"),
|
|
|
|
DLT_CHOICE(APPLE_IP_OVER_IEEE1394, "Apple IP-over-IEEE 1394"),
|
|
|
|
DLT_CHOICE(MTP2_WITH_PHDR, "SS7 MTP2 with Pseudo-header"),
|
|
|
|
DLT_CHOICE(MTP2, "SS7 MTP2"),
|
|
|
|
DLT_CHOICE(MTP3, "SS7 MTP3"),
|
|
|
|
DLT_CHOICE(SCCP, "SS7 SCCP"),
|
|
|
|
DLT_CHOICE(DOCSIS, "DOCSIS"),
|
|
|
|
DLT_CHOICE(LINUX_IRDA, "Linux IrDA"),
|
|
|
|
DLT_CHOICE(IEEE802_11_RADIO_AVS, "802.11 plus AVS radio information header"),
|
|
|
|
DLT_CHOICE(JUNIPER_MONITOR, "Juniper Passive Monitor PIC"),
|
|
|
|
DLT_CHOICE(BACNET_MS_TP, "BACnet MS/TP"),
|
|
|
|
DLT_CHOICE(PPP_PPPD, "PPP for pppd, with direction flag"),
|
|
|
|
DLT_CHOICE(JUNIPER_PPPOE, "Juniper PPPoE"),
|
|
|
|
DLT_CHOICE(JUNIPER_PPPOE_ATM, "Juniper PPPoE/ATM"),
|
|
|
|
DLT_CHOICE(GPRS_LLC, "GPRS LLC"),
|
|
|
|
DLT_CHOICE(GPF_T, "GPF-T"),
|
|
|
|
DLT_CHOICE(GPF_F, "GPF-F"),
|
|
|
|
DLT_CHOICE(JUNIPER_PIC_PEER, "Juniper PIC Peer"),
|
|
|
|
DLT_CHOICE(ERF_ETH, "Ethernet with Endace ERF header"),
|
|
|
|
DLT_CHOICE(ERF_POS, "Packet-over-SONET with Endace ERF header"),
|
|
|
|
DLT_CHOICE(LINUX_LAPD, "Linux vISDN LAPD"),
|
|
|
|
DLT_CHOICE(JUNIPER_ETHER, "Juniper Ethernet"),
|
|
|
|
DLT_CHOICE(JUNIPER_PPP, "Juniper PPP"),
|
|
|
|
DLT_CHOICE(JUNIPER_FRELAY, "Juniper Frame Relay"),
|
|
|
|
DLT_CHOICE(JUNIPER_CHDLC, "Juniper C-HDLC"),
|
|
|
|
DLT_CHOICE(MFR, "FRF.16 Frame Relay"),
|
|
|
|
DLT_CHOICE(JUNIPER_VP, "Juniper Voice PIC"),
|
|
|
|
DLT_CHOICE(A429, "Arinc 429"),
|
|
|
|
DLT_CHOICE(A653_ICM, "Arinc 653 Interpartition Communication"),
|
|
|
|
DLT_CHOICE(USB_FREEBSD, "USB with FreeBSD header"),
|
|
|
|
DLT_CHOICE(BLUETOOTH_HCI_H4, "Bluetooth HCI UART transport layer"),
|
|
|
|
DLT_CHOICE(IEEE802_16_MAC_CPS, "IEEE 802.16 MAC Common Part Sublayer"),
|
|
|
|
DLT_CHOICE(USB_LINUX, "USB with Linux header"),
|
|
|
|
DLT_CHOICE(CAN20B, "Controller Area Network (CAN) v. 2.0B"),
|
|
|
|
DLT_CHOICE(IEEE802_15_4_LINUX, "IEEE 802.15.4 with Linux padding"),
|
|
|
|
DLT_CHOICE(PPI, "Per-Packet Information"),
|
|
|
|
DLT_CHOICE(IEEE802_16_MAC_CPS_RADIO, "IEEE 802.16 MAC Common Part Sublayer plus radiotap header"),
|
|
|
|
DLT_CHOICE(JUNIPER_ISM, "Juniper Integrated Service Module"),
|
|
|
|
DLT_CHOICE(IEEE802_15_4, "IEEE 802.15.4 with FCS"),
|
|
|
|
DLT_CHOICE(SITA, "SITA pseudo-header"),
|
|
|
|
DLT_CHOICE(ERF, "Endace ERF header"),
|
|
|
|
DLT_CHOICE(RAIF1, "Ethernet with u10 Networks pseudo-header"),
|
|
|
|
DLT_CHOICE(IPMB, "IPMB"),
|
|
|
|
DLT_CHOICE(JUNIPER_ST, "Juniper Secure Tunnel"),
|
|
|
|
DLT_CHOICE(BLUETOOTH_HCI_H4_WITH_PHDR, "Bluetooth HCI UART transport layer plus pseudo-header"),
|
|
|
|
DLT_CHOICE(AX25_KISS, "AX.25 with KISS header"),
|
|
|
|
DLT_CHOICE(IEEE802_15_4_NONASK_PHY, "IEEE 802.15.4 with non-ASK PHY data"),
|
|
|
|
DLT_CHOICE(MPLS, "MPLS with label as link-layer header"),
|
|
|
|
DLT_CHOICE(LINUX_EVDEV, "Linux evdev events"),
|
|
|
|
DLT_CHOICE(USB_LINUX_MMAPPED, "USB with padded Linux header"),
|
|
|
|
DLT_CHOICE(DECT, "DECT"),
|
|
|
|
DLT_CHOICE(AOS, "AOS Space Data Link protocol"),
|
|
|
|
DLT_CHOICE(WIHART, "Wireless HART"),
|
|
|
|
DLT_CHOICE(FC_2, "Fibre Channel FC-2"),
|
|
|
|
DLT_CHOICE(FC_2_WITH_FRAME_DELIMS, "Fibre Channel FC-2 with frame delimiters"),
|
|
|
|
DLT_CHOICE(IPNET, "Solaris ipnet"),
|
|
|
|
DLT_CHOICE(CAN_SOCKETCAN, "CAN-bus with SocketCAN headers"),
|
|
|
|
DLT_CHOICE(IPV4, "Raw IPv4"),
|
|
|
|
DLT_CHOICE(IPV6, "Raw IPv6"),
|
|
|
|
DLT_CHOICE(IEEE802_15_4_NOFCS, "IEEE 802.15.4 without FCS"),
|
|
|
|
DLT_CHOICE(DBUS, "D-Bus"),
|
|
|
|
DLT_CHOICE(JUNIPER_VS, "Juniper Virtual Server"),
|
|
|
|
DLT_CHOICE(JUNIPER_SRX_E2E, "Juniper SRX E2E"),
|
|
|
|
DLT_CHOICE(JUNIPER_FIBRECHANNEL, "Juniper Fibre Channel"),
|
|
|
|
DLT_CHOICE(DVB_CI, "DVB-CI"),
|
|
|
|
DLT_CHOICE(MUX27010, "MUX27010"),
|
|
|
|
DLT_CHOICE(STANAG_5066_D_PDU, "STANAG 5066 D_PDUs"),
|
|
|
|
DLT_CHOICE(JUNIPER_ATM_CEMIC, "Juniper ATM CEMIC"),
|
|
|
|
DLT_CHOICE(NFLOG, "Linux netfilter log messages"),
|
|
|
|
DLT_CHOICE(NETANALYZER, "Ethernet with Hilscher netANALYZER pseudo-header"),
|
|
|
|
DLT_CHOICE(NETANALYZER_TRANSPARENT, "Ethernet with Hilscher netANALYZER pseudo-header and with preamble and SFD"),
|
|
|
|
DLT_CHOICE(IPOIB, "RFC 4391 IP-over-Infiniband"),
|
|
|
|
DLT_CHOICE(MPEG_2_TS, "MPEG-2 transport stream"),
|
|
|
|
DLT_CHOICE(NG40, "ng40 protocol tester Iub/Iur"),
|
|
|
|
DLT_CHOICE(NFC_LLCP, "NFC LLCP PDUs with pseudo-header"),
|
|
|
|
DLT_CHOICE(INFINIBAND, "InfiniBand"),
|
|
|
|
DLT_CHOICE(SCTP, "SCTP"),
|
|
|
|
DLT_CHOICE(USBPCAP, "USB with USBPcap header"),
|
|
|
|
DLT_CHOICE(RTAC_SERIAL, "Schweitzer Engineering Laboratories RTAC packets"),
|
|
|
|
DLT_CHOICE(BLUETOOTH_LE_LL, "Bluetooth Low Energy air interface"),
|
|
|
|
DLT_CHOICE(NETLINK, "Linux netlink"),
|
|
|
|
DLT_CHOICE(BLUETOOTH_LINUX_MONITOR, "Bluetooth Linux Monitor"),
|
|
|
|
DLT_CHOICE(BLUETOOTH_BREDR_BB, "Bluetooth Basic Rate/Enhanced Data Rate baseband packets"),
|
|
|
|
DLT_CHOICE(BLUETOOTH_LE_LL_WITH_PHDR, "Bluetooth Low Energy air interface with pseudo-header"),
|
|
|
|
DLT_CHOICE(PROFIBUS_DL, "PROFIBUS data link layer"),
|
|
|
|
DLT_CHOICE(PKTAP, "Apple DLT_PKTAP"),
|
|
|
|
DLT_CHOICE(EPON, "Ethernet with 802.3 Clause 65 EPON preamble"),
|
|
|
|
DLT_CHOICE(IPMI_HPM_2, "IPMI trace packets"),
|
|
|
|
DLT_CHOICE(ZWAVE_R1_R2, "Z-Wave RF profile R1 and R2 packets"),
|
|
|
|
DLT_CHOICE(ZWAVE_R3, "Z-Wave RF profile R3 packets"),
|
|
|
|
DLT_CHOICE(WATTSTOPPER_DLM, "WattStopper Digital Lighting Management (DLM) and Legrand Nitoo Open protocol"),
|
|
|
|
DLT_CHOICE(ISO_14443, "ISO 14443 messages"),
|
|
|
|
DLT_CHOICE(RDS, "IEC 62106 Radio Data System groups"),
|
2004-03-31 09:07:39 +00:00
|
|
|
DLT_CHOICE_SENTINEL
|
|
|
|
};
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_datalink_name_to_val(const char *name)
|
|
|
|
{
|
|
|
|
int i;
|
|
|
|
|
|
|
|
for (i = 0; dlt_choices[i].name != NULL; i++) {
|
2017-02-12 07:04:44 +00:00
|
|
|
if (pcap_strcasecmp(dlt_choices[i].name, name) == 0)
|
2004-03-31 09:07:39 +00:00
|
|
|
return (dlt_choices[i].dlt);
|
|
|
|
}
|
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
|
|
|
|
const char *
|
|
|
|
pcap_datalink_val_to_name(int dlt)
|
|
|
|
{
|
|
|
|
int i;
|
|
|
|
|
|
|
|
for (i = 0; dlt_choices[i].name != NULL; i++) {
|
|
|
|
if (dlt_choices[i].dlt == dlt)
|
2017-02-12 07:04:44 +00:00
|
|
|
return (dlt_choices[i].name);
|
2004-03-31 09:07:39 +00:00
|
|
|
}
|
|
|
|
return (NULL);
|
|
|
|
}
|
|
|
|
|
|
|
|
const char *
|
|
|
|
pcap_datalink_val_to_description(int dlt)
|
|
|
|
{
|
|
|
|
int i;
|
|
|
|
|
|
|
|
for (i = 0; dlt_choices[i].name != NULL; i++) {
|
|
|
|
if (dlt_choices[i].dlt == dlt)
|
|
|
|
return (dlt_choices[i].description);
|
2003-01-26 01:16:33 +00:00
|
|
|
}
|
2004-03-31 09:07:39 +00:00
|
|
|
return (NULL);
|
2003-01-26 01:16:33 +00:00
|
|
|
}
|
|
|
|
|
2012-01-31 17:22:07 +00:00
|
|
|
struct tstamp_type_choice {
|
|
|
|
const char *name;
|
|
|
|
const char *description;
|
|
|
|
int type;
|
|
|
|
};
|
|
|
|
|
|
|
|
static struct tstamp_type_choice tstamp_type_choices[] = {
|
|
|
|
{ "host", "Host", PCAP_TSTAMP_HOST },
|
|
|
|
{ "host_lowprec", "Host, low precision", PCAP_TSTAMP_HOST_LOWPREC },
|
|
|
|
{ "host_hiprec", "Host, high precision", PCAP_TSTAMP_HOST_HIPREC },
|
|
|
|
{ "adapter", "Adapter", PCAP_TSTAMP_ADAPTER },
|
|
|
|
{ "adapter_unsynced", "Adapter, not synced with system time", PCAP_TSTAMP_ADAPTER_UNSYNCED },
|
|
|
|
{ NULL, NULL, 0 }
|
|
|
|
};
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_tstamp_type_name_to_val(const char *name)
|
|
|
|
{
|
|
|
|
int i;
|
|
|
|
|
|
|
|
for (i = 0; tstamp_type_choices[i].name != NULL; i++) {
|
|
|
|
if (pcap_strcasecmp(tstamp_type_choices[i].name, name) == 0)
|
|
|
|
return (tstamp_type_choices[i].type);
|
|
|
|
}
|
|
|
|
return (PCAP_ERROR);
|
|
|
|
}
|
|
|
|
|
|
|
|
const char *
|
|
|
|
pcap_tstamp_type_val_to_name(int tstamp_type)
|
|
|
|
{
|
|
|
|
int i;
|
|
|
|
|
|
|
|
for (i = 0; tstamp_type_choices[i].name != NULL; i++) {
|
|
|
|
if (tstamp_type_choices[i].type == tstamp_type)
|
|
|
|
return (tstamp_type_choices[i].name);
|
|
|
|
}
|
|
|
|
return (NULL);
|
|
|
|
}
|
|
|
|
|
|
|
|
const char *
|
|
|
|
pcap_tstamp_type_val_to_description(int tstamp_type)
|
|
|
|
{
|
|
|
|
int i;
|
|
|
|
|
|
|
|
for (i = 0; tstamp_type_choices[i].name != NULL; i++) {
|
|
|
|
if (tstamp_type_choices[i].type == tstamp_type)
|
|
|
|
return (tstamp_type_choices[i].description);
|
|
|
|
}
|
|
|
|
return (NULL);
|
|
|
|
}
|
|
|
|
|
1996-08-19 20:36:34 +00:00
|
|
|
int
|
|
|
|
pcap_snapshot(pcap_t *p)
|
|
|
|
{
|
2015-01-06 18:58:31 +00:00
|
|
|
if (!p->activated)
|
|
|
|
return (PCAP_ERROR_NOT_ACTIVATED);
|
1996-08-19 20:36:34 +00:00
|
|
|
return (p->snapshot);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_is_swapped(pcap_t *p)
|
|
|
|
{
|
2015-01-06 18:58:31 +00:00
|
|
|
if (!p->activated)
|
|
|
|
return (PCAP_ERROR_NOT_ACTIVATED);
|
|
|
|
return (p->swapped);
|
1996-08-19 20:36:34 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_major_version(pcap_t *p)
|
|
|
|
{
|
2015-01-06 18:58:31 +00:00
|
|
|
if (!p->activated)
|
|
|
|
return (PCAP_ERROR_NOT_ACTIVATED);
|
|
|
|
return (p->version_major);
|
1996-08-19 20:36:34 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_minor_version(pcap_t *p)
|
|
|
|
{
|
2015-01-06 18:58:31 +00:00
|
|
|
if (!p->activated)
|
|
|
|
return (PCAP_ERROR_NOT_ACTIVATED);
|
|
|
|
return (p->version_minor);
|
1996-08-19 20:36:34 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
FILE *
|
|
|
|
pcap_file(pcap_t *p)
|
|
|
|
{
|
2015-01-06 18:58:31 +00:00
|
|
|
return (p->rfile);
|
1996-08-19 20:36:34 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_fileno(pcap_t *p)
|
|
|
|
{
|
2017-02-12 07:04:44 +00:00
|
|
|
#ifndef _WIN32
|
1996-08-19 20:36:34 +00:00
|
|
|
return (p->fd);
|
2004-03-31 09:07:39 +00:00
|
|
|
#else
|
|
|
|
if (p->adapter != NULL)
|
|
|
|
return ((int)(DWORD)p->adapter->hFile);
|
|
|
|
else
|
2015-01-06 18:58:31 +00:00
|
|
|
return (PCAP_ERROR);
|
2004-03-31 09:07:39 +00:00
|
|
|
#endif
|
|
|
|
}
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
#if !defined(_WIN32) && !defined(MSDOS)
|
2004-03-31 09:07:39 +00:00
|
|
|
int
|
|
|
|
pcap_get_selectable_fd(pcap_t *p)
|
|
|
|
{
|
|
|
|
return (p->selectable_fd);
|
1996-08-19 20:36:34 +00:00
|
|
|
}
|
2004-03-31 09:07:39 +00:00
|
|
|
#endif
|
1996-08-19 20:36:34 +00:00
|
|
|
|
|
|
|
void
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_perror(pcap_t *p, const char *prefix)
|
1996-08-19 20:36:34 +00:00
|
|
|
{
|
|
|
|
fprintf(stderr, "%s: %s\n", prefix, p->errbuf);
|
|
|
|
}
|
|
|
|
|
|
|
|
char *
|
|
|
|
pcap_geterr(pcap_t *p)
|
|
|
|
{
|
|
|
|
return (p->errbuf);
|
|
|
|
}
|
|
|
|
|
2004-03-31 09:07:39 +00:00
|
|
|
int
|
|
|
|
pcap_getnonblock(pcap_t *p, char *errbuf)
|
|
|
|
{
|
2013-05-30 06:41:26 +00:00
|
|
|
int ret;
|
|
|
|
|
|
|
|
ret = p->getnonblock_op(p, errbuf);
|
|
|
|
if (ret == -1) {
|
|
|
|
/*
|
|
|
|
* In case somebody depended on the bug wherein
|
|
|
|
* the error message was put into p->errbuf
|
|
|
|
* by pcap_getnonblock_fd().
|
|
|
|
*/
|
|
|
|
strlcpy(p->errbuf, errbuf, PCAP_ERRBUF_SIZE);
|
|
|
|
}
|
|
|
|
return (ret);
|
2004-03-31 09:07:39 +00:00
|
|
|
}
|
|
|
|
|
2002-06-21 01:36:27 +00:00
|
|
|
/*
|
2004-03-31 09:07:39 +00:00
|
|
|
* Get the current non-blocking mode setting, under the assumption that
|
|
|
|
* it's just the standard POSIX non-blocking flag.
|
2002-06-21 01:36:27 +00:00
|
|
|
*/
|
2017-02-12 07:04:44 +00:00
|
|
|
#if !defined(_WIN32) && !defined(MSDOS)
|
2002-06-21 01:36:27 +00:00
|
|
|
int
|
2004-03-31 09:07:39 +00:00
|
|
|
pcap_getnonblock_fd(pcap_t *p, char *errbuf)
|
2002-06-21 01:36:27 +00:00
|
|
|
{
|
|
|
|
int fdflags;
|
|
|
|
|
|
|
|
fdflags = fcntl(p->fd, F_GETFL, 0);
|
|
|
|
if (fdflags == -1) {
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE, "F_GETFL: %s",
|
2002-06-21 01:36:27 +00:00
|
|
|
pcap_strerror(errno));
|
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
if (fdflags & O_NONBLOCK)
|
|
|
|
return (1);
|
|
|
|
else
|
|
|
|
return (0);
|
|
|
|
}
|
2004-03-31 09:07:39 +00:00
|
|
|
#endif
|
2002-06-21 01:36:27 +00:00
|
|
|
|
|
|
|
int
|
|
|
|
pcap_setnonblock(pcap_t *p, int nonblock, char *errbuf)
|
2004-03-31 09:07:39 +00:00
|
|
|
{
|
2013-05-30 06:41:26 +00:00
|
|
|
int ret;
|
|
|
|
|
|
|
|
ret = p->setnonblock_op(p, nonblock, errbuf);
|
|
|
|
if (ret == -1) {
|
|
|
|
/*
|
|
|
|
* In case somebody depended on the bug wherein
|
|
|
|
* the error message was put into p->errbuf
|
|
|
|
* by pcap_setnonblock_fd().
|
|
|
|
*/
|
|
|
|
strlcpy(p->errbuf, errbuf, PCAP_ERRBUF_SIZE);
|
|
|
|
}
|
|
|
|
return (ret);
|
2004-03-31 09:07:39 +00:00
|
|
|
}
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
#if !defined(_WIN32) && !defined(MSDOS)
|
2004-03-31 09:07:39 +00:00
|
|
|
/*
|
|
|
|
* Set non-blocking mode, under the assumption that it's just the
|
|
|
|
* standard POSIX non-blocking flag. (This can be called by the
|
|
|
|
* per-platform non-blocking-mode routine if that routine also
|
|
|
|
* needs to do some additional work.)
|
|
|
|
*/
|
|
|
|
int
|
|
|
|
pcap_setnonblock_fd(pcap_t *p, int nonblock, char *errbuf)
|
2002-06-21 01:36:27 +00:00
|
|
|
{
|
|
|
|
int fdflags;
|
|
|
|
|
|
|
|
fdflags = fcntl(p->fd, F_GETFL, 0);
|
|
|
|
if (fdflags == -1) {
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE, "F_GETFL: %s",
|
2002-06-21 01:36:27 +00:00
|
|
|
pcap_strerror(errno));
|
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
if (nonblock)
|
|
|
|
fdflags |= O_NONBLOCK;
|
|
|
|
else
|
|
|
|
fdflags &= ~O_NONBLOCK;
|
|
|
|
if (fcntl(p->fd, F_SETFL, fdflags) == -1) {
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(errbuf, PCAP_ERRBUF_SIZE, "F_SETFL: %s",
|
2002-06-21 01:36:27 +00:00
|
|
|
pcap_strerror(errno));
|
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
return (0);
|
|
|
|
}
|
2004-03-31 09:07:39 +00:00
|
|
|
#endif
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
#ifdef _WIN32
|
2004-03-31 09:07:39 +00:00
|
|
|
/*
|
2017-02-12 07:04:44 +00:00
|
|
|
* Generate a string for a Win32-specific error (i.e. an error generated when
|
2004-03-31 09:07:39 +00:00
|
|
|
* calling a Win32 API).
|
|
|
|
* For errors occurred during standard C calls, we still use pcap_strerror()
|
|
|
|
*/
|
2017-02-12 07:04:44 +00:00
|
|
|
void
|
|
|
|
pcap_win32_err_to_str(DWORD error, char *errbuf)
|
2004-03-31 09:07:39 +00:00
|
|
|
{
|
2017-02-12 07:04:44 +00:00
|
|
|
size_t errlen;
|
2005-05-29 17:46:52 +00:00
|
|
|
char *p;
|
2004-03-31 09:07:39 +00:00
|
|
|
|
|
|
|
FormatMessage(FORMAT_MESSAGE_FROM_SYSTEM, NULL, error, 0, errbuf,
|
|
|
|
PCAP_ERRBUF_SIZE, NULL);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* "FormatMessage()" "helpfully" sticks CR/LF at the end of the
|
|
|
|
* message. Get rid of it.
|
|
|
|
*/
|
|
|
|
errlen = strlen(errbuf);
|
|
|
|
if (errlen >= 2) {
|
|
|
|
errbuf[errlen - 1] = '\0';
|
|
|
|
errbuf[errlen - 2] = '\0';
|
|
|
|
}
|
2005-05-29 17:46:52 +00:00
|
|
|
p = strchr(errbuf, '\0');
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf (p, PCAP_ERRBUF_SIZE+1-(p-errbuf), " (%lu)", error);
|
2004-03-31 09:07:39 +00:00
|
|
|
}
|
|
|
|
#endif
|
2002-06-21 01:36:27 +00:00
|
|
|
|
2009-03-21 20:43:56 +00:00
|
|
|
/*
|
|
|
|
* Generate error strings for PCAP_ERROR_ and PCAP_WARNING_ values.
|
|
|
|
*/
|
|
|
|
const char *
|
|
|
|
pcap_statustostr(int errnum)
|
|
|
|
{
|
|
|
|
static char ebuf[15+10+1];
|
|
|
|
|
|
|
|
switch (errnum) {
|
|
|
|
|
|
|
|
case PCAP_WARNING:
|
|
|
|
return("Generic warning");
|
|
|
|
|
2012-01-31 17:22:07 +00:00
|
|
|
case PCAP_WARNING_TSTAMP_TYPE_NOTSUP:
|
|
|
|
return ("That type of time stamp is not supported by that device");
|
|
|
|
|
2009-03-21 20:43:56 +00:00
|
|
|
case PCAP_WARNING_PROMISC_NOTSUP:
|
|
|
|
return ("That device doesn't support promiscuous mode");
|
|
|
|
|
|
|
|
case PCAP_ERROR:
|
|
|
|
return("Generic error");
|
|
|
|
|
|
|
|
case PCAP_ERROR_BREAK:
|
|
|
|
return("Loop terminated by pcap_breakloop");
|
|
|
|
|
|
|
|
case PCAP_ERROR_NOT_ACTIVATED:
|
|
|
|
return("The pcap_t has not been activated");
|
|
|
|
|
|
|
|
case PCAP_ERROR_ACTIVATED:
|
|
|
|
return ("The setting can't be changed after the pcap_t is activated");
|
|
|
|
|
|
|
|
case PCAP_ERROR_NO_SUCH_DEVICE:
|
|
|
|
return ("No such device exists");
|
|
|
|
|
|
|
|
case PCAP_ERROR_RFMON_NOTSUP:
|
|
|
|
return ("That device doesn't support monitor mode");
|
|
|
|
|
|
|
|
case PCAP_ERROR_NOT_RFMON:
|
|
|
|
return ("That operation is supported only in monitor mode");
|
|
|
|
|
|
|
|
case PCAP_ERROR_PERM_DENIED:
|
|
|
|
return ("You don't have permission to capture on that device");
|
|
|
|
|
|
|
|
case PCAP_ERROR_IFACE_NOT_UP:
|
|
|
|
return ("That device is not up");
|
2012-01-31 17:22:07 +00:00
|
|
|
|
|
|
|
case PCAP_ERROR_CANTSET_TSTAMP_TYPE:
|
|
|
|
return ("That device doesn't support setting the time stamp type");
|
|
|
|
|
|
|
|
case PCAP_ERROR_PROMISC_PERM_DENIED:
|
|
|
|
return ("You don't have permission to capture in promiscuous mode on that device");
|
2015-01-06 18:58:31 +00:00
|
|
|
|
|
|
|
case PCAP_ERROR_TSTAMP_PRECISION_NOTSUP:
|
|
|
|
return ("That device doesn't support that time stamp precision");
|
2009-03-21 20:43:56 +00:00
|
|
|
}
|
2017-02-12 07:04:44 +00:00
|
|
|
(void)pcap_snprintf(ebuf, sizeof ebuf, "Unknown error: %d", errnum);
|
2009-03-21 20:43:56 +00:00
|
|
|
return(ebuf);
|
|
|
|
}
|
|
|
|
|
1996-08-19 20:36:34 +00:00
|
|
|
/*
|
|
|
|
* Not all systems have strerror().
|
|
|
|
*/
|
2007-10-16 02:02:02 +00:00
|
|
|
const char *
|
1996-08-19 20:36:34 +00:00
|
|
|
pcap_strerror(int errnum)
|
|
|
|
{
|
|
|
|
#ifdef HAVE_STRERROR
|
2017-02-12 07:04:44 +00:00
|
|
|
#ifdef _WIN32
|
|
|
|
static char errbuf[PCAP_ERRBUF_SIZE];
|
|
|
|
errno_t errno;
|
|
|
|
errno = strerror_s(errbuf, PCAP_ERRBUF_SIZE, errnum);
|
|
|
|
if (errno != 0) /* errno = 0 if successful */
|
|
|
|
strlcpy(errbuf, "strerror_s() error", PCAP_ERRBUF_SIZE);
|
|
|
|
return (errbuf);
|
|
|
|
#else
|
1996-08-19 20:36:34 +00:00
|
|
|
return (strerror(errnum));
|
2017-02-12 07:04:44 +00:00
|
|
|
#endif /* _WIN32 */
|
1996-08-19 20:36:34 +00:00
|
|
|
#else
|
|
|
|
extern int sys_nerr;
|
|
|
|
extern const char *const sys_errlist[];
|
2017-02-12 07:04:44 +00:00
|
|
|
static char errbuf[PCAP_ERRBUF_SIZE];
|
1996-08-19 20:36:34 +00:00
|
|
|
|
|
|
|
if ((unsigned int)errnum < sys_nerr)
|
|
|
|
return ((char *)sys_errlist[errnum]);
|
2017-02-12 07:04:44 +00:00
|
|
|
(void)pcap_snprintf(errbuf, sizeof errbuf, "Unknown error: %d", errnum);
|
|
|
|
return (errbuf);
|
1996-08-19 20:36:34 +00:00
|
|
|
#endif
|
|
|
|
}
|
|
|
|
|
2004-03-31 09:07:39 +00:00
|
|
|
int
|
|
|
|
pcap_setfilter(pcap_t *p, struct bpf_program *fp)
|
|
|
|
{
|
2012-01-31 17:22:07 +00:00
|
|
|
return (p->setfilter_op(p, fp));
|
2004-03-31 09:07:39 +00:00
|
|
|
}
|
|
|
|
|
2005-07-11 03:24:53 +00:00
|
|
|
/*
|
|
|
|
* Set direction flag, which controls whether we accept only incoming
|
|
|
|
* packets, only outgoing packets, or both.
|
|
|
|
* Note that, depending on the platform, some or all direction arguments
|
|
|
|
* might not be supported.
|
|
|
|
*/
|
|
|
|
int
|
2006-09-04 19:43:23 +00:00
|
|
|
pcap_setdirection(pcap_t *p, pcap_direction_t d)
|
2005-07-11 03:24:53 +00:00
|
|
|
{
|
|
|
|
if (p->setdirection_op == NULL) {
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
|
2005-07-11 03:24:53 +00:00
|
|
|
"Setting direction is not implemented on this platform");
|
2012-01-31 17:22:07 +00:00
|
|
|
return (-1);
|
2005-07-11 03:24:53 +00:00
|
|
|
} else
|
2012-01-31 17:22:07 +00:00
|
|
|
return (p->setdirection_op(p, d));
|
2005-07-11 03:24:53 +00:00
|
|
|
}
|
|
|
|
|
2004-03-31 09:07:39 +00:00
|
|
|
int
|
|
|
|
pcap_stats(pcap_t *p, struct pcap_stat *ps)
|
|
|
|
{
|
2012-01-31 17:22:07 +00:00
|
|
|
return (p->stats_op(p, ps));
|
2004-03-31 09:07:39 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
2005-05-29 17:46:52 +00:00
|
|
|
pcap_stats_dead(pcap_t *p, struct pcap_stat *ps _U_)
|
2004-03-31 09:07:39 +00:00
|
|
|
{
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
|
2004-03-31 09:07:39 +00:00
|
|
|
"Statistics aren't available from a pcap_open_dead pcap_t");
|
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
#ifdef _WIN32
|
|
|
|
struct pcap_stat *
|
|
|
|
pcap_stats_ex(pcap_t *p, int *pcap_stat_size)
|
|
|
|
{
|
|
|
|
return (p->stats_ex_op(p, pcap_stat_size));
|
|
|
|
}
|
|
|
|
|
2009-03-21 20:43:56 +00:00
|
|
|
int
|
|
|
|
pcap_setbuff(pcap_t *p, int dim)
|
|
|
|
{
|
2012-01-31 17:22:07 +00:00
|
|
|
return (p->setbuff_op(p, dim));
|
2009-03-21 20:43:56 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
pcap_setbuff_dead(pcap_t *p, int dim)
|
|
|
|
{
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
|
2009-03-21 20:43:56 +00:00
|
|
|
"The kernel buffer size cannot be set on a pcap_open_dead pcap_t");
|
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_setmode(pcap_t *p, int mode)
|
|
|
|
{
|
2012-01-31 17:22:07 +00:00
|
|
|
return (p->setmode_op(p, mode));
|
2009-03-21 20:43:56 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
pcap_setmode_dead(pcap_t *p, int mode)
|
|
|
|
{
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
|
2009-03-21 20:43:56 +00:00
|
|
|
"impossible to set mode on a pcap_open_dead pcap_t");
|
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_setmintocopy(pcap_t *p, int size)
|
|
|
|
{
|
2012-01-31 17:22:07 +00:00
|
|
|
return (p->setmintocopy_op(p, size));
|
2009-03-21 20:43:56 +00:00
|
|
|
}
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
static int
|
|
|
|
pcap_setmintocopy_dead(pcap_t *p, int size)
|
|
|
|
{
|
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
|
|
|
|
"The mintocopy parameter cannot be set on a pcap_open_dead pcap_t");
|
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
|
|
|
|
HANDLE
|
|
|
|
pcap_getevent(pcap_t *p)
|
|
|
|
{
|
|
|
|
return (p->getevent_op(p));
|
|
|
|
}
|
|
|
|
|
|
|
|
static HANDLE
|
|
|
|
pcap_getevent_dead(pcap_t *p)
|
|
|
|
{
|
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
|
|
|
|
"A pcap_open_dead pcap_t has no event handle");
|
|
|
|
return (INVALID_HANDLE_VALUE);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_oid_get_request(pcap_t *p, bpf_u_int32 oid, void *data, size_t *lenp)
|
2015-01-06 18:58:31 +00:00
|
|
|
{
|
2017-02-12 07:04:44 +00:00
|
|
|
return (p->oid_get_request_op(p, oid, data, lenp));
|
2015-01-06 18:58:31 +00:00
|
|
|
}
|
|
|
|
|
2009-03-21 20:43:56 +00:00
|
|
|
static int
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_oid_get_request_dead(pcap_t *p, bpf_u_int32 oid _U_, void *data _U_,
|
|
|
|
size_t *lenp _U_)
|
2009-03-21 20:43:56 +00:00
|
|
|
{
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
|
|
|
|
"An OID get request cannot be performed on a pcap_open_dead pcap_t");
|
|
|
|
return (PCAP_ERROR);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_oid_set_request(pcap_t *p, bpf_u_int32 oid, const void *data, size_t *lenp)
|
|
|
|
{
|
|
|
|
return (p->oid_set_request_op(p, oid, data, lenp));
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
pcap_oid_set_request_dead(pcap_t *p, bpf_u_int32 oid _U_, const void *data _U_,
|
|
|
|
size_t *lenp _U_)
|
|
|
|
{
|
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
|
|
|
|
"An OID set request cannot be performed on a pcap_open_dead pcap_t");
|
|
|
|
return (PCAP_ERROR);
|
|
|
|
}
|
|
|
|
|
|
|
|
pcap_send_queue *
|
|
|
|
pcap_sendqueue_alloc(u_int memsize)
|
|
|
|
{
|
|
|
|
pcap_send_queue *tqueue;
|
|
|
|
|
|
|
|
/* Allocate the queue */
|
|
|
|
tqueue = (pcap_send_queue *)malloc(sizeof(pcap_send_queue));
|
|
|
|
if (tqueue == NULL){
|
|
|
|
return (NULL);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Allocate the buffer */
|
|
|
|
tqueue->buffer = (char *)malloc(memsize);
|
|
|
|
if (tqueue->buffer == NULL) {
|
|
|
|
free(tqueue);
|
|
|
|
return (NULL);
|
|
|
|
}
|
|
|
|
|
|
|
|
tqueue->maxlen = memsize;
|
|
|
|
tqueue->len = 0;
|
|
|
|
|
|
|
|
return (tqueue);
|
|
|
|
}
|
|
|
|
|
|
|
|
void
|
|
|
|
pcap_sendqueue_destroy(pcap_send_queue *queue)
|
|
|
|
{
|
|
|
|
free(queue->buffer);
|
|
|
|
free(queue);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_sendqueue_queue(pcap_send_queue *queue, const struct pcap_pkthdr *pkt_header, const u_char *pkt_data)
|
|
|
|
{
|
|
|
|
if (queue->len + sizeof(struct pcap_pkthdr) + pkt_header->caplen > queue->maxlen){
|
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Copy the pcap_pkthdr header*/
|
|
|
|
memcpy(queue->buffer + queue->len, pkt_header, sizeof(struct pcap_pkthdr));
|
|
|
|
queue->len += sizeof(struct pcap_pkthdr);
|
|
|
|
|
|
|
|
/* copy the packet */
|
|
|
|
memcpy(queue->buffer + queue->len, pkt_data, pkt_header->caplen);
|
|
|
|
queue->len += pkt_header->caplen;
|
|
|
|
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
|
|
|
|
u_int
|
|
|
|
pcap_sendqueue_transmit(pcap_t *p, pcap_send_queue *queue, int sync)
|
|
|
|
{
|
|
|
|
return (p->sendqueue_transmit_op(p, queue, sync));
|
|
|
|
}
|
|
|
|
|
|
|
|
static u_int
|
|
|
|
pcap_sendqueue_transmit_dead(pcap_t *p, pcap_send_queue *queue, int sync)
|
|
|
|
{
|
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
|
|
|
|
"Packets cannot be transmitted on a pcap_open_dead pcap_t");
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_setuserbuffer(pcap_t *p, int size)
|
|
|
|
{
|
|
|
|
return (p->setuserbuffer_op(p, size));
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
pcap_setuserbuffer_dead(pcap_t *p, int size)
|
|
|
|
{
|
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
|
|
|
|
"The user buffer cannot be set on a pcap_open_dead pcap_t");
|
2009-03-21 20:43:56 +00:00
|
|
|
return (-1);
|
|
|
|
}
|
2017-02-12 07:04:44 +00:00
|
|
|
|
|
|
|
int
|
|
|
|
pcap_live_dump(pcap_t *p, char *filename, int maxsize, int maxpacks)
|
|
|
|
{
|
|
|
|
return (p->live_dump_op(p, filename, maxsize, maxpacks));
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
pcap_live_dump_dead(pcap_t *p, char *filename, int maxsize, int maxpacks)
|
|
|
|
{
|
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
|
|
|
|
"Live packet dumping cannot be performed on a pcap_open_dead pcap_t");
|
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_live_dump_ended(pcap_t *p, int sync)
|
|
|
|
{
|
|
|
|
return (p->live_dump_ended_op(p, sync));
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
pcap_live_dump_ended_dead(pcap_t *p, int sync)
|
|
|
|
{
|
|
|
|
pcap_snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
|
|
|
|
"Live packet dumping cannot be performed on a pcap_open_dead pcap_t");
|
|
|
|
return (-1);
|
|
|
|
}
|
|
|
|
|
|
|
|
PAirpcapHandle
|
|
|
|
pcap_get_airpcap_handle(pcap_t *p)
|
|
|
|
{
|
|
|
|
PAirpcapHandle handle;
|
|
|
|
|
|
|
|
handle = p->get_airpcap_handle_op(p);
|
|
|
|
if (handle == NULL) {
|
|
|
|
(void)pcap_snprintf(p->errbuf, sizeof(p->errbuf),
|
|
|
|
"This isn't an AirPcap device");
|
|
|
|
}
|
|
|
|
return (handle);
|
|
|
|
}
|
|
|
|
|
|
|
|
static PAirpcapHandle
|
|
|
|
pcap_get_airpcap_handle_dead(pcap_t *p)
|
|
|
|
{
|
|
|
|
return (NULL);
|
|
|
|
}
|
2009-03-21 20:43:56 +00:00
|
|
|
#endif
|
|
|
|
|
|
|
|
/*
|
|
|
|
* On some platforms, we need to clean up promiscuous or monitor mode
|
|
|
|
* when we close a device - and we want that to happen even if the
|
|
|
|
* application just exits without explicitl closing devices.
|
|
|
|
* On those platforms, we need to register a "close all the pcaps"
|
|
|
|
* routine to be called when we exit, and need to maintain a list of
|
|
|
|
* pcaps that need to be closed to clean up modes.
|
|
|
|
*
|
|
|
|
* XXX - not thread-safe.
|
|
|
|
*/
|
|
|
|
|
|
|
|
/*
|
|
|
|
* List of pcaps on which we've done something that needs to be
|
|
|
|
* cleaned up.
|
|
|
|
* If there are any such pcaps, we arrange to call "pcap_close_all()"
|
|
|
|
* when we exit, and have it close all of them.
|
|
|
|
*/
|
|
|
|
static struct pcap *pcaps_to_close;
|
|
|
|
|
|
|
|
/*
|
|
|
|
* TRUE if we've already called "atexit()" to cause "pcap_close_all()" to
|
|
|
|
* be called on exit.
|
|
|
|
*/
|
|
|
|
static int did_atexit;
|
|
|
|
|
|
|
|
static void
|
|
|
|
pcap_close_all(void)
|
|
|
|
{
|
|
|
|
struct pcap *handle;
|
|
|
|
|
|
|
|
while ((handle = pcaps_to_close) != NULL)
|
|
|
|
pcap_close(handle);
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
pcap_do_addexit(pcap_t *p)
|
2005-05-29 17:46:52 +00:00
|
|
|
{
|
2008-09-16 20:32:29 +00:00
|
|
|
/*
|
2009-03-21 20:43:56 +00:00
|
|
|
* If we haven't already done so, arrange to have
|
|
|
|
* "pcap_close_all()" called when we exit.
|
2008-09-16 20:32:29 +00:00
|
|
|
*/
|
2009-03-21 20:43:56 +00:00
|
|
|
if (!did_atexit) {
|
2017-02-12 07:04:44 +00:00
|
|
|
if (atexit(pcap_close_all) != 0) {
|
2009-03-21 20:43:56 +00:00
|
|
|
/*
|
|
|
|
* "atexit()" failed; let our caller know.
|
|
|
|
*/
|
2017-02-12 07:04:44 +00:00
|
|
|
strlcpy(p->errbuf, "atexit failed", PCAP_ERRBUF_SIZE);
|
2009-03-21 20:43:56 +00:00
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
did_atexit = 1;
|
|
|
|
}
|
|
|
|
return (1);
|
|
|
|
}
|
|
|
|
|
2005-05-29 17:46:52 +00:00
|
|
|
void
|
2009-03-21 20:43:56 +00:00
|
|
|
pcap_add_to_pcaps_to_close(pcap_t *p)
|
2005-05-29 17:46:52 +00:00
|
|
|
{
|
2015-01-06 18:58:31 +00:00
|
|
|
p->next = pcaps_to_close;
|
2009-03-21 20:43:56 +00:00
|
|
|
pcaps_to_close = p;
|
|
|
|
}
|
|
|
|
|
|
|
|
void
|
|
|
|
pcap_remove_from_pcaps_to_close(pcap_t *p)
|
|
|
|
{
|
|
|
|
pcap_t *pc, *prevpc;
|
|
|
|
|
|
|
|
for (pc = pcaps_to_close, prevpc = NULL; pc != NULL;
|
2015-01-06 18:58:31 +00:00
|
|
|
prevpc = pc, pc = pc->next) {
|
2009-03-21 20:43:56 +00:00
|
|
|
if (pc == p) {
|
|
|
|
/*
|
|
|
|
* Found it. Remove it from the list.
|
|
|
|
*/
|
|
|
|
if (prevpc == NULL) {
|
|
|
|
/*
|
|
|
|
* It was at the head of the list.
|
|
|
|
*/
|
2015-01-06 18:58:31 +00:00
|
|
|
pcaps_to_close = pc->next;
|
2009-03-21 20:43:56 +00:00
|
|
|
} else {
|
|
|
|
/*
|
|
|
|
* It was in the middle of the list.
|
|
|
|
*/
|
2015-01-06 18:58:31 +00:00
|
|
|
prevpc->next = pc->next;
|
2009-03-21 20:43:56 +00:00
|
|
|
}
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
void
|
|
|
|
pcap_cleanup_live_common(pcap_t *p)
|
|
|
|
{
|
|
|
|
if (p->buffer != NULL) {
|
2005-05-29 17:46:52 +00:00
|
|
|
free(p->buffer);
|
2009-03-21 20:43:56 +00:00
|
|
|
p->buffer = NULL;
|
|
|
|
}
|
|
|
|
if (p->dlt_list != NULL) {
|
|
|
|
free(p->dlt_list);
|
|
|
|
p->dlt_list = NULL;
|
|
|
|
p->dlt_count = 0;
|
|
|
|
}
|
2012-01-31 17:22:07 +00:00
|
|
|
if (p->tstamp_type_list != NULL) {
|
|
|
|
free(p->tstamp_type_list);
|
|
|
|
p->tstamp_type_list = NULL;
|
|
|
|
p->tstamp_type_count = 0;
|
|
|
|
}
|
2015-01-06 18:58:31 +00:00
|
|
|
if (p->tstamp_precision_list != NULL) {
|
|
|
|
free(p->tstamp_precision_list);
|
|
|
|
p->tstamp_precision_list = NULL;
|
|
|
|
p->tstamp_precision_count = 0;
|
|
|
|
}
|
2009-03-21 20:43:56 +00:00
|
|
|
pcap_freecode(&p->fcode);
|
2017-02-12 07:04:44 +00:00
|
|
|
#if !defined(_WIN32) && !defined(MSDOS)
|
2009-03-21 20:43:56 +00:00
|
|
|
if (p->fd >= 0) {
|
2005-05-29 17:46:52 +00:00
|
|
|
close(p->fd);
|
2009-03-21 20:43:56 +00:00
|
|
|
p->fd = -1;
|
|
|
|
}
|
Update libpcap to 1.1.1.
Changes:
Thu. April 1, 2010. guy@alum.mit.edu.
Summary for 1.1.1 libpcap release
Update CHANGES to reflect more of the changes in 1.1.0.
Fix build on RHEL5.
Fix shared library build on AIX.
Thu. March 11, 2010. ken@netfunctional.ca/guy@alum.mit.edu.
Summary for 1.1.0 libpcap release
Add SocketCAN capture support
Add Myricom SNF API support
Update Endace DAG and ERF support
Add support for shared libraries on Solaris, HP-UX, and AIX
Build, install, and un-install shared libraries by default;
don't build/install shared libraries on platforms we don't support
Fix building from a directory other than the source directory
Fix compiler warnings and builds on some platforms
Update config.guess and config.sub
Support monitor mode on mac80211 devices on Linux
Fix USB memory-mapped capturing on Linux; it requires a new DLT_
value
On Linux, scan /sys/class/net for devices if we have it; scan
it, or /proc/net/dev if we don't have /sys/class/net, even if
we have getifaddrs(), as it'll find interfaces with no
addresses
Add limited support for reading pcap-ng files
Fix BPF driver-loading error handling on AIX
Support getting the full-length interface description on FreeBSD
In the lexical analyzer, free up any addrinfo structure we got back
from getaddrinfo().
Add support for BPF and libdlpi in OpenSolaris (and SXCE)
Hyphenate "link-layer" everywhere
Add /sys/kernel/debug/usb/usbmon to the list of usbmon locations
In pcap_read_linux_mmap(), if there are no frames available, call
poll() even if we're in non-blocking mode, so we pick up
errors, and check for the errors in question.
Note that poll() works on BPF devices is Snow Leopard
If an ENXIO or ENETDOWN is received, it may mean the device has
gone away. Deal with it.
For BPF, raise the default capture buffer size to from 32k to 512k
Support ps_ifdrop on Linux
Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile
under cygwin.
Changes to Linux mmapped captures.
Fix bug where create_ring would fail for particular snaplen and
buffer size combinations
Update pcap-config so that it handles libpcap requiring
additional libraries
Add workaround for threadsafeness on Windows
Add missing mapping for DLT_ENC <-> LINKTYPE_ENC
DLT: Add DLT_CAN_SOCKETCAN
DLT: Add Solaris ipnet
Don't check for DLT_IPNET if it's not defined
Add link-layer types for Fibre Channel FC-2
Add link-layer types for Wireless HART
Add link-layer types for AOS
Add link-layer types for DECT
Autoconf fixes (AIX, HP-UX, OSF/1, Tru64 cleanups)
Install headers unconditionally, and include vlan.h/bluetooth.h if
enabled
Autoconf fixes+cleanup
Support enabling/disabling bluetooth (--{en,dis}able-bluetooth)
Support disabling SITA support (--without-sita)
Return -1 on failure to create packet ring (if supported but
creation failed)
Fix handling of 'any' device, so that it can be opened, and no longer
attempt to open it in Monitor mode
Add support for snapshot length for USB Memory-Mapped Interface
Fix configure and build on recent Linux kernels
Fix memory-mapped Linux capture to support pcap_next() and
pcap_next_ex()
Fixes for Linux USB capture
DLT: Add DLT_LINUX_EVDEV
DLT: Add DLT_GSMTAP_UM
DLT: Add DLT_GSMTAP_ABIS
2010-10-28 16:22:13 +00:00
|
|
|
p->selectable_fd = -1;
|
2005-05-29 17:46:52 +00:00
|
|
|
#endif
|
|
|
|
}
|
|
|
|
|
2004-03-31 09:07:39 +00:00
|
|
|
static void
|
2009-03-21 20:43:56 +00:00
|
|
|
pcap_cleanup_dead(pcap_t *p _U_)
|
2004-03-31 09:07:39 +00:00
|
|
|
{
|
|
|
|
/* Nothing to do. */
|
|
|
|
}
|
|
|
|
|
2001-04-03 04:18:09 +00:00
|
|
|
pcap_t *
|
2015-01-06 18:58:31 +00:00
|
|
|
pcap_open_dead_with_tstamp_precision(int linktype, int snaplen, u_int precision)
|
2001-04-03 04:18:09 +00:00
|
|
|
{
|
|
|
|
pcap_t *p;
|
|
|
|
|
2015-01-06 18:58:31 +00:00
|
|
|
switch (precision) {
|
|
|
|
|
|
|
|
case PCAP_TSTAMP_PRECISION_MICRO:
|
|
|
|
case PCAP_TSTAMP_PRECISION_NANO:
|
|
|
|
break;
|
|
|
|
|
|
|
|
default:
|
|
|
|
return NULL;
|
|
|
|
}
|
2001-04-03 04:18:09 +00:00
|
|
|
p = malloc(sizeof(*p));
|
|
|
|
if (p == NULL)
|
|
|
|
return NULL;
|
|
|
|
memset (p, 0, sizeof(*p));
|
|
|
|
p->snapshot = snaplen;
|
|
|
|
p->linktype = linktype;
|
2015-01-06 18:58:31 +00:00
|
|
|
p->opt.tstamp_precision = precision;
|
2004-03-31 09:07:39 +00:00
|
|
|
p->stats_op = pcap_stats_dead;
|
2017-02-12 07:04:44 +00:00
|
|
|
#ifdef _WIN32
|
|
|
|
p->stats_ex_op = (stats_ex_op_t)pcap_not_initialized_ptr;
|
2009-03-21 20:43:56 +00:00
|
|
|
p->setbuff_op = pcap_setbuff_dead;
|
|
|
|
p->setmode_op = pcap_setmode_dead;
|
|
|
|
p->setmintocopy_op = pcap_setmintocopy_dead;
|
2017-02-12 07:04:44 +00:00
|
|
|
p->getevent_op = pcap_getevent_dead;
|
|
|
|
p->oid_get_request_op = pcap_oid_get_request_dead;
|
|
|
|
p->oid_set_request_op = pcap_oid_set_request_dead;
|
|
|
|
p->sendqueue_transmit_op = pcap_sendqueue_transmit_dead;
|
|
|
|
p->setuserbuffer_op = pcap_setuserbuffer_dead;
|
|
|
|
p->live_dump_op = pcap_live_dump_dead;
|
|
|
|
p->live_dump_ended_op = pcap_live_dump_ended_dead;
|
|
|
|
p->get_airpcap_handle_op = pcap_get_airpcap_handle_dead;
|
2009-03-21 20:43:56 +00:00
|
|
|
#endif
|
|
|
|
p->cleanup_op = pcap_cleanup_dead;
|
2017-02-12 07:04:44 +00:00
|
|
|
|
|
|
|
/*
|
|
|
|
* A "dead" pcap_t never requires special BPF code generation.
|
|
|
|
*/
|
|
|
|
p->bpf_codegen_flags = 0;
|
|
|
|
|
2009-03-21 20:43:56 +00:00
|
|
|
p->activated = 1;
|
2012-01-31 17:22:07 +00:00
|
|
|
return (p);
|
2001-04-03 04:18:09 +00:00
|
|
|
}
|
|
|
|
|
2015-01-06 18:58:31 +00:00
|
|
|
pcap_t *
|
|
|
|
pcap_open_dead(int linktype, int snaplen)
|
|
|
|
{
|
|
|
|
return (pcap_open_dead_with_tstamp_precision(linktype, snaplen,
|
|
|
|
PCAP_TSTAMP_PRECISION_MICRO));
|
|
|
|
}
|
|
|
|
|
2005-05-29 17:46:52 +00:00
|
|
|
/*
|
|
|
|
* API compatible with WinPcap's "send a packet" routine - returns -1
|
|
|
|
* on error, 0 otherwise.
|
|
|
|
*
|
|
|
|
* XXX - what if we get a short write?
|
|
|
|
*/
|
|
|
|
int
|
|
|
|
pcap_sendpacket(pcap_t *p, const u_char *buf, int size)
|
|
|
|
{
|
|
|
|
if (p->inject_op(p, buf, size) == -1)
|
|
|
|
return (-1);
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* API compatible with OpenBSD's "send a packet" routine - returns -1 on
|
|
|
|
* error, number of bytes written otherwise.
|
|
|
|
*/
|
|
|
|
int
|
|
|
|
pcap_inject(pcap_t *p, const void *buf, size_t size)
|
|
|
|
{
|
|
|
|
return (p->inject_op(p, buf, size));
|
|
|
|
}
|
|
|
|
|
1996-08-19 20:36:34 +00:00
|
|
|
void
|
|
|
|
pcap_close(pcap_t *p)
|
|
|
|
{
|
2017-02-12 07:04:44 +00:00
|
|
|
if (p->opt.device != NULL)
|
|
|
|
free(p->opt.device);
|
2009-03-21 20:43:56 +00:00
|
|
|
p->cleanup_op(p);
|
1996-08-19 20:36:34 +00:00
|
|
|
free(p);
|
|
|
|
}
|
2004-03-31 09:07:39 +00:00
|
|
|
|
2009-03-21 20:43:56 +00:00
|
|
|
/*
|
|
|
|
* Given a BPF program, a pcap_pkthdr structure for a packet, and the raw
|
|
|
|
* data for the packet, check whether the packet passes the filter.
|
|
|
|
* Returns the return value of the filter program, which will be zero if
|
|
|
|
* the packet doesn't pass and non-zero if the packet does pass.
|
|
|
|
*/
|
|
|
|
int
|
2013-05-30 06:41:26 +00:00
|
|
|
pcap_offline_filter(const struct bpf_program *fp, const struct pcap_pkthdr *h,
|
2009-03-21 20:43:56 +00:00
|
|
|
const u_char *pkt)
|
|
|
|
{
|
2013-05-30 06:41:26 +00:00
|
|
|
const struct bpf_insn *fcode = fp->bf_insns;
|
2009-03-21 20:43:56 +00:00
|
|
|
|
2015-01-06 18:58:31 +00:00
|
|
|
if (fcode != NULL)
|
2009-03-21 20:43:56 +00:00
|
|
|
return (bpf_filter(fcode, pkt, h->len, h->caplen));
|
|
|
|
else
|
|
|
|
return (0);
|
|
|
|
}
|
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
#include "pcap_version.h"
|
|
|
|
|
|
|
|
#ifdef _WIN32
|
|
|
|
|
|
|
|
static char *full_pcap_version_string;
|
2005-05-29 17:46:52 +00:00
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
#ifdef HAVE_VERSION_H
|
2004-03-31 09:07:39 +00:00
|
|
|
/*
|
2017-02-12 07:04:44 +00:00
|
|
|
* libpcap being built for Windows, as part of a WinPcap/Npcap source
|
|
|
|
* tree. Include version.h from that source tree to get the WinPcap/Npcap
|
|
|
|
* version.
|
|
|
|
*
|
|
|
|
* XXX - it'd be nice if we could somehow generate the WinPcap version number
|
|
|
|
* when building WinPcap. (It'd be nice to do so for the packet.dll version
|
|
|
|
* number as well.)
|
2004-03-31 09:07:39 +00:00
|
|
|
*/
|
2017-02-12 07:04:44 +00:00
|
|
|
#include "../../version.h"
|
|
|
|
|
|
|
|
static const char wpcap_version_string[] = WINPCAP_VER_STRING;
|
2004-03-31 09:07:39 +00:00
|
|
|
static const char pcap_version_string_fmt[] =
|
2017-02-12 07:04:44 +00:00
|
|
|
WINPCAP_PRODUCT_NAME " version %s, based on %s";
|
2004-03-31 09:07:39 +00:00
|
|
|
static const char pcap_version_string_packet_dll_fmt[] =
|
2017-02-12 07:04:44 +00:00
|
|
|
WINPCAP_PRODUCT_NAME " version %s (packet.dll version %s), based on %s";
|
2004-03-31 09:07:39 +00:00
|
|
|
|
|
|
|
const char *
|
|
|
|
pcap_lib_version(void)
|
|
|
|
{
|
|
|
|
char *packet_version_string;
|
2005-05-29 17:46:52 +00:00
|
|
|
size_t full_pcap_version_string_len;
|
2004-03-31 09:07:39 +00:00
|
|
|
|
2005-05-29 17:46:52 +00:00
|
|
|
if (full_pcap_version_string == NULL) {
|
2004-03-31 09:07:39 +00:00
|
|
|
/*
|
|
|
|
* Generate the version string.
|
|
|
|
*/
|
|
|
|
packet_version_string = PacketGetVersion();
|
|
|
|
if (strcmp(wpcap_version_string, packet_version_string) == 0) {
|
|
|
|
/*
|
|
|
|
* WinPcap version string and packet.dll version
|
|
|
|
* string are the same; just report the WinPcap
|
|
|
|
* version.
|
|
|
|
*/
|
2005-05-29 17:46:52 +00:00
|
|
|
full_pcap_version_string_len =
|
|
|
|
(sizeof pcap_version_string_fmt - 4) +
|
|
|
|
strlen(wpcap_version_string) +
|
|
|
|
strlen(pcap_version_string);
|
|
|
|
full_pcap_version_string =
|
|
|
|
malloc(full_pcap_version_string_len);
|
2015-01-06 18:58:31 +00:00
|
|
|
if (full_pcap_version_string == NULL)
|
|
|
|
return (NULL);
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(full_pcap_version_string,
|
|
|
|
full_pcap_version_string_len,
|
|
|
|
pcap_version_string_fmt,
|
|
|
|
wpcap_version_string,
|
2005-05-29 17:46:52 +00:00
|
|
|
pcap_version_string);
|
2004-03-31 09:07:39 +00:00
|
|
|
} else {
|
|
|
|
/*
|
|
|
|
* WinPcap version string and packet.dll version
|
|
|
|
* string are different; that shouldn't be the
|
|
|
|
* case (the two libraries should come from the
|
|
|
|
* same version of WinPcap), so we report both
|
|
|
|
* versions.
|
|
|
|
*/
|
2005-05-29 17:46:52 +00:00
|
|
|
full_pcap_version_string_len =
|
|
|
|
(sizeof pcap_version_string_packet_dll_fmt - 6) +
|
2004-03-31 09:07:39 +00:00
|
|
|
strlen(wpcap_version_string) +
|
2005-05-29 17:46:52 +00:00
|
|
|
strlen(packet_version_string) +
|
|
|
|
strlen(pcap_version_string);
|
|
|
|
full_pcap_version_string = malloc(full_pcap_version_string_len);
|
2015-01-06 18:58:31 +00:00
|
|
|
if (full_pcap_version_string == NULL)
|
|
|
|
return (NULL);
|
2017-02-12 07:04:44 +00:00
|
|
|
pcap_snprintf(full_pcap_version_string,
|
|
|
|
full_pcap_version_string_len,
|
2004-03-31 09:07:39 +00:00
|
|
|
pcap_version_string_packet_dll_fmt,
|
2017-02-12 07:04:44 +00:00
|
|
|
wpcap_version_string,
|
|
|
|
packet_version_string,
|
2005-05-29 17:46:52 +00:00
|
|
|
pcap_version_string);
|
2004-03-31 09:07:39 +00:00
|
|
|
}
|
|
|
|
}
|
2005-05-29 17:46:52 +00:00
|
|
|
return (full_pcap_version_string);
|
2004-03-31 09:07:39 +00:00
|
|
|
}
|
2005-05-29 17:46:52 +00:00
|
|
|
|
2017-02-12 07:04:44 +00:00
|
|
|
#else /* HAVE_VERSION_H */
|
|
|
|
|
|
|
|
/*
|
|
|
|
* libpcap being built for Windows, not as part of a WinPcap/Npcap source
|
|
|
|
* tree.
|
|
|
|
*/
|
|
|
|
static const char pcap_version_string_packet_dll_fmt[] =
|
|
|
|
"%s (packet.dll version %s)";
|
|
|
|
const char *
|
|
|
|
pcap_lib_version(void)
|
|
|
|
{
|
|
|
|
char *packet_version_string;
|
|
|
|
size_t full_pcap_version_string_len;
|
|
|
|
|
|
|
|
if (full_pcap_version_string == NULL) {
|
|
|
|
/*
|
|
|
|
* Generate the version string. Report the packet.dll
|
|
|
|
* version.
|
|
|
|
*/
|
|
|
|
packet_version_string = PacketGetVersion();
|
|
|
|
full_pcap_version_string_len =
|
|
|
|
(sizeof pcap_version_string_packet_dll_fmt - 4) +
|
|
|
|
strlen(pcap_version_string) +
|
|
|
|
strlen(packet_version_string);
|
|
|
|
full_pcap_version_string = malloc(full_pcap_version_string_len);
|
|
|
|
if (full_pcap_version_string == NULL)
|
|
|
|
return (NULL);
|
|
|
|
pcap_snprintf(full_pcap_version_string,
|
|
|
|
full_pcap_version_string_len,
|
|
|
|
pcap_version_string_packet_dll_fmt,
|
|
|
|
pcap_version_string,
|
|
|
|
packet_version_string);
|
|
|
|
}
|
|
|
|
return (full_pcap_version_string);
|
|
|
|
}
|
|
|
|
|
|
|
|
#endif /* HAVE_VERSION_H */
|
|
|
|
|
2005-05-29 17:46:52 +00:00
|
|
|
#elif defined(MSDOS)
|
|
|
|
|
|
|
|
static char *full_pcap_version_string;
|
|
|
|
|
|
|
|
const char *
|
|
|
|
pcap_lib_version (void)
|
|
|
|
{
|
|
|
|
char *packet_version_string;
|
|
|
|
size_t full_pcap_version_string_len;
|
|
|
|
static char dospfx[] = "DOS-";
|
|
|
|
|
|
|
|
if (full_pcap_version_string == NULL) {
|
|
|
|
/*
|
|
|
|
* Generate the version string.
|
|
|
|
*/
|
|
|
|
full_pcap_version_string_len =
|
|
|
|
sizeof dospfx + strlen(pcap_version_string);
|
|
|
|
full_pcap_version_string =
|
|
|
|
malloc(full_pcap_version_string_len);
|
2015-01-06 18:58:31 +00:00
|
|
|
if (full_pcap_version_string == NULL)
|
|
|
|
return (NULL);
|
2005-05-29 17:46:52 +00:00
|
|
|
strcpy(full_pcap_version_string, dospfx);
|
|
|
|
strcat(full_pcap_version_string, pcap_version_string);
|
|
|
|
}
|
|
|
|
return (full_pcap_version_string);
|
|
|
|
}
|
|
|
|
|
|
|
|
#else /* UN*X */
|
2004-03-31 09:07:39 +00:00
|
|
|
|
|
|
|
const char *
|
|
|
|
pcap_lib_version(void)
|
|
|
|
{
|
|
|
|
return (pcap_version_string);
|
|
|
|
}
|
|
|
|
#endif
|
2017-02-12 07:04:44 +00:00
|
|
|
|
|
|
|
#ifdef YYDEBUG
|
|
|
|
/*
|
|
|
|
* Set the internal "debug printout" flag for the filter expression parser.
|
|
|
|
* The code to print that stuff is present only if YYDEBUG is defined, so
|
|
|
|
* the flag, and the routine to set it, are defined only if YYDEBUG is
|
|
|
|
* defined.
|
|
|
|
*
|
|
|
|
* This is intended for libpcap developers, not for general use.
|
|
|
|
* If you want to set these in a program, you'll have to declare this
|
|
|
|
* routine yourself, with the appropriate DLL import attribute on Windows;
|
|
|
|
* it's not declared in any header file, and won't be declared in any
|
|
|
|
* header file provided by libpcap.
|
|
|
|
*/
|
|
|
|
PCAP_API void pcap_set_parser_debug(int value);
|
|
|
|
|
|
|
|
PCAP_API_DEF void
|
|
|
|
pcap_set_parser_debug(int value)
|
|
|
|
{
|
|
|
|
extern int pcap_debug;
|
|
|
|
|
|
|
|
pcap_debug = value;
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
|
|
|
#ifdef BDEBUG
|
|
|
|
/*
|
|
|
|
* Set the internal "debug printout" flag for the filter expression optimizer.
|
|
|
|
* The code to print that stuff is present only if BDEBUG is defined, so
|
|
|
|
* the flag, and the routine to set it, are defined only if BDEBUG is
|
|
|
|
* defined.
|
|
|
|
*
|
|
|
|
* This is intended for libpcap developers, not for general use.
|
|
|
|
* If you want to set these in a program, you'll have to declare this
|
|
|
|
* routine yourself, with the appropriate DLL import attribute on Windows;
|
|
|
|
* it's not declared in any header file, and won't be declared in any
|
|
|
|
* header file provided by libpcap.
|
|
|
|
*/
|
|
|
|
PCAP_API void pcap_set_optimizer_debug(int value);
|
|
|
|
|
|
|
|
PCAP_API_DEF void
|
|
|
|
pcap_set_optimizer_debug(int value)
|
|
|
|
{
|
|
|
|
extern int pcap_optimizer_debug;
|
|
|
|
|
|
|
|
pcap_optimizer_debug = value;
|
|
|
|
}
|
|
|
|
#endif
|